π³π±
spirttm
2026-10-27 03:22:00
(3 minutes ago)
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151 ...
show more
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env.production HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env.dev HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env.production HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env.dev HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env.local HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env.prod HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /.env.backup HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:22:00 +0000] "GET /app/.env HTTP/1.1" 404 134 "-" "Mozilla/5.0"
...
show less
Port Scan
Web App Attack
π¬π§
gurnip
2026-10-27 03:19:35
(5 minutes ago)
Vulnerability probe of page /.env.local, not found on server.
Brute-Force
Web App Attack
πΈπͺ
sweplox.se
2026-10-27 03:19:33
(5 minutes ago)
Ip 46.151.178.15 performed 'crowdsecurity/http-sensitive-files' (5 events over 38.625822ms) at 2026- ...
show more
Ip 46.151.178.15 performed 'crowdsecurity/http-sensitive-files' (5 events over 38.625822ms) at 2026-10-27 03:19:32.092483299 +0000 UTC
show less
Hacking
πΊπ¦
Infocom
2026-10-27 03:14:01
(11 minutes ago)
WEB_Brute-Force
Brute-Force
π¨π³
yiyan
2026-10-27 03:12:42
(12 minutes ago)
Unauthorized open proxy probing and scanning
Open Proxy
Port Scan
Anonymous
2026-10-27 03:12:33
(12 minutes ago)
fail2ban: Sensitive web probes detected
Web App Attack
π§π·
Peregrine
2026-10-27 03:11:40
(13 minutes ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: - 46.151.178.15 - - [25/Oct/2026:14:27:58 -0300] "GET /.e ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: - 46.151.178.15 - - [25/Oct/2026:14:27:58 -0300] "GET /.env HTTP/1.1" 404 414
- 46.151.178.15 - - [25/Oct/2026:14:27:59 -0300] "GET /.env.dev HTTP/1.1" 404 414
- 46.151.178.15 - - [25/Oct/2026:14:27:59 -0300] "GET /.env.local HTTP/1.1" 404 414
- 46.151.178.15 - - [25/Oct/2026:14:27:59 -0300] "GET /.env.prod HTTP/1.1" 404 414
- 46.151.178.15 - - [25/Oct/2026:14:27:59 -0300] "GET /.env.production HTTP/1.1" 404 414
- 46.151.178.15 - - [25/Oct/2026:14:27:59 -0300] "GET /.env.backup HTTP/1.1" 404 414
- 46.151.178.15 - - [25/Oct/2026:14:27:59 -0300] "GET /laravel/.env HTTP/1.1" 404 414
- 46.151.178.15 - - [25/Oct/2026:14:27:59 -0300] "GET /config/.env HTTP/1.1" 404 414
show less
Bad Web Bot
π³π±
donarev419
2026-10-27 03:08:47
(16 minutes ago)
Connection to port 8080 with data transfer.
Data preview: GET /.env.prod HTTP/1.1
Host: 87.229.95.1 ...
show more
Connection to port 8080 with data transfer.
Data preview: GET /.env.prod HTTP/1.1
Host: 87.229.95.155:8080
User-Agent: Mozilla/5.0
Accept-Encoding: gzip
C
show less
Port Scan
Hacking
π»π³
edata-vn
2026-10-27 03:06:42
(18 minutes ago)
"GET /.env HTTP/1.1" 444 "Mozilla/5.0"
Bad Web Bot
Web App Attack
π©πͺ
Admins@FBN
2026-10-27 03:06:00
(19 minutes ago)
FW-PortScan: Traffic Blocked srcport=43808 dstport=8080
Port Scan
π©πͺ
Admins@Storch
2026-10-27 03:05:41
(19 minutes ago)
IPS:drop <match> dstport=8000
Brute-Force
Exploited Host
π©πͺ
AetherFox
2026-10-27 03:05:14
(19 minutes ago)
AetherFox VoidGuard detected: [Tue Oct 27 03:05:13.726715 2026] [security2:error] [pid 717861:tid 71 ...
show more
AetherFox VoidGuard detected: [Tue Oct 27 03:05:13.726715 2026] [security2:error] [pid 717861:tid 717905] [client 46.151.178.15:63738] [client 46.151.178.15] ModSecurity: Access denied with code 403 (phase 1). String match "/.env" at REQUEST_URI. [file "/etc/modsecurity/AetherFox.conf"] [line "99"] [id "100067"] [msg ".env access blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "46.225.81.32"] [uri "/.env"] [unique_id "auAU6bORKXw8VacaNuq-TQAAAI8"]
[Tue Oct 27 03:05:13.726732 2026] [security2:error] [pid 717860:tid 717863] [client 46.151.178.15:63752] [client 46.151.178.15] ModSecurity: Access denied with code 403 (phase 1). String match "/.env" at REQUEST_URI. [file "/etc/modsecurity/AetherFox.conf"] [line "99"] [id "100067"] [msg ".env access blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "46.225.81.32"] [uri "/.env.local"] [unique_id "auAU6VqrWgGRNFgg7_X7RQAAAEA"]
[Tue Oct 27 03:05:13.727030 2026] [security2:error] [pid 717
...
show less
Hacking
Bad Web Bot
πΉπ·
ScchutzZ
2026-10-27 03:05:08
(19 minutes ago)
Fail2Ban banΔ±. Jail: plesk-modsecurity.
Brute-Force
Anonymous
2026-10-27 03:04:27
(20 minutes ago)
46.151.178.15 - - [27/Oct/2026:03:04:26 +0000] "GET /.env.production HTTP/1.1" 404 134 "-" "Mozilla/ ...
show more
46.151.178.15 - - [27/Oct/2026:03:04:26 +0000] "GET /.env.production HTTP/1.1" 404 134 "-" "Mozilla/5.0"
46.151.178.15 - - [27/Oct/2026:03:04:26 +0000] "GET /.env.prod HTTP/1.1" 404 134 "-" "Mozilla/5.0"
...
show less
Web App Attack
π·πΊ
dnsbd.tech
2026-10-27 03:02:02
(23 minutes ago)
nftables: Port scan (TCP:80) [srv1]
Port Scan
Hacking