Anonymous
2026-07-29 07:00:00
(2 months ago)
Apache probe; attempts=421; exact paths: /.env | /.env.backup | /.env.backup1 | /.env.backup2 | /.en ...
show more
Apache probe; attempts=421; exact paths: /.env | /.env.backup | /.env.backup1 | /.env.backup2 | /.env.bak | /.env.ci | /.env.dev | /.env.development | /.env.dist | /.env.docker | /.env.example | /.env.json | /.env.live | /.env.local | /.env.old | /.env.preprod | /.env.prod | /.env.production | /.env.remote | /.env.sample | /.env.save | /.env.stage | /.env.staging | /.env.swp | /.env.test | /.env.txt | /.env.uat | /.env.yaml | /.env.yml | /.env~ | /.git/.env | /.git/config | /actions/.env | /admin-panel/.env | /admin/.env | /administrator/.env | /angular/.env | /ansible/.env | /api/.env | /api/dev/.env | /api/staging/.env | /api/v1/.env | /api/v2/.env | /api/v3/.env | /app/.env | /application/.env | /apps/.env | /assets/.env | /aws/.env | /azure/.env | /backend/.env | /backup/.env | /backups/.env | /beta/.env | /bin/.env | /bootstrap/.env | /brevo/.env | /build/.env | /buildkite/.env | /bulk/.env | /cache/.en | ... [204 exact paths total]
show less
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-07-26 21:59:36
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25.
show less
Web App Attack
SSH
Hacking
๐ฉ๐ช
SiyCah
2026-07-26 03:00:02
(2 months ago)
IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
darkfader
2026-07-25 08:03:00
(2 months ago)
Web App Attack
๐ฉ๐ช
dbmwebdesign
2026-07-25 05:40:06
(2 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
Anonymous
2026-07-25 05:07:51
(2 months ago)
Blocked: Reason='Vulnerability probing โ PHP scan detected (41/60 min)'; Requests=41
Port Scan
๐ณ๐ฑ
Savvii
2026-07-25 04:33:40
(2 months ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
pipeline.es
2026-07-25 04:17:33
(2 months ago)
Web scanning / probing for vulnerable paths | URL: /github/.env | Evidence: pisgate.pt 54.78.220.150 ...
show more
Web scanning / probing for vulnerable paths | URL: /github/.env | Evidence: pisgate.pt 54.78.220.150 - - [25/Jul/2026:06:17:05 +0200] \"GET /github/.env HTTP/1.1\" 404 22478 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=IE | ASN: AMAZON-02 | Country: IE
show less
Port Scan
Web App Attack
Anonymous
2026-07-25 03:28:53
(2 months ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env
Web App Attack
Anonymous
2026-07-25 03:28:52
(2 months ago)
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show more
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
Hacking
๐ฉ๐ช
zumbo.net
2026-07-25 03:24:35
(2 months ago)
[Sat Jul 25 06:24:33.658726 2026] [proxy_fcgi:error] [pid 1405732:tid 1405756] [client 54.78.220.150 ...
show more
[Sat Jul 25 06:24:33.658726 2026] [proxy_fcgi:error] [pid 1405732:tid 1405756] [client 54.78.220.150:0] AH01071: Got error 'Primary script unknown'
[Sat Jul 25 06:24:33.688670 2026] [proxy_fcgi:error] [pid 1405732:tid 1405739] [client 54.78.220.150:0] AH01071: Got error 'Primary script unknown'
[Sat Jul 25 06:24:33.718230 2026] [proxy_fcgi:error] [pid 1405732:tid 1405758] [client 54.78.220.150:0] AH01071: Got error 'Primary script unknown'
[Sat Jul 25 06:24:33.747744 2026] [proxy_fcgi:error] [pid 1405732:tid 1405763] [client 54.78.220.150:0] AH01071: Got error 'Primary script unknown'
[Sat Jul 25 06:24:33.777528 2026] [proxy_fcgi:error] [pid 1405732:tid 1405761] [client 54.78.220.150:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-07-25 01:07:57
(2 months ago)
54.78.220.150 - - [25/Jul/2026:04:07:55 +0300] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 ...
show more
54.78.220.150 - - [25/Jul/2026:04:07:55 +0300] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
54.78.220.150 - - [25/Jul/2026:04:07:56 +0300] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-07-24 03:05:05
(2 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack