๐ฎ๐ณ
evicky2002
2026-08-26 07:31:11
(10 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-08-25 18:40:40
(23 hours ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-25 13:07:57
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
pscriptos
2026-08-25 11:51:13
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841
Web App Attack
๐ซ๐ท
Baking333
2026-08-25 11:32:06
(1 day ago)
[redacted] 79.127.222.204 - - [25/Aug/2026:12:31:56 +0100] "GET /.env HTTP/1.1" 307 423 "-" "Mozilla ...
show more
[redacted] 79.127.222.204 - - [25/Aug/2026:12:31:56 +0100] "GET /.env HTTP/1.1" 307 423 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" [redacted] 79.127.222.204 - - [25/Aug/2026:12:32:04 +0100] "GET /.env HTTP/1.1" 307 5734 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-25 11:18:40
(1 day ago)
79.127.222.204 - - [25/Aug/2026:13:18:40 +0200] "GET /.env HTTP/1.1" 403 2420 "-" "Mozilla/5.0 (Maci ...
show more
79.127.222.204 - - [25/Aug/2026:13:18:40 +0200] "GET /.env HTTP/1.1" 403 2420 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
Vaction
2026-08-25 10:58:56
(1 day ago)
79.127.222.204 - - [25/Aug/2026:12:58:56 +0200] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macin ...
show more
79.127.222.204 - - [25/Aug/2026:12:58:56 +0200] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
show less
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ฐ
SaltySoftworks
2026-08-25 10:09:29
(1 day ago)
Connecting to IP instead of domain name
Hacking
Web App Attack
๐ซ๐ท
sthoyer.de
2026-08-25 10:07:03
(1 day ago)
79.127.222.204 - - [25/Aug/2026:12:06:47 +0200] "GET /.env HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Macin ...
show more
79.127.222.204 - - [25/Aug/2026:12:06:47 +0200] "GET /.env HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
79.127.222.204 - - [25/Aug/2026:12:06:48 +0200] "GET /.env HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
79.127.222.204 - - [25/Aug/2026:12:07:01 +0200] "GET /.env HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
...
show less
Web App Attack
๐ซ๐ท
Baking333
2026-08-25 10:01:38
(1 day ago)
redacted:80 79.127.222.204 - - [25/Aug/2026:11:01:35 +0100] "GET /.env HTTP/1.1" 200 203 0/20347 "-" ...
show more
redacted:80 79.127.222.204 - - [25/Aug/2026:11:01:35 +0100] "GET /.env HTTP/1.1" 200 203 0/20347 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" redacted:443 79.127.222.204 - - [25/Aug/2026:11:01:36 +0100] "GET /.env HTTP/1.1" 200 5443 0/47627 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Tamsy
2026-08-25 10:01:05
(1 day ago)
HTTPD - Web Application vulnerability scan
Web App Attack
๐ฉ๐ช
mravb
2026-08-25 09:49:28
(1 day ago)
79.127.222.204 - - [25/Aug/2026:12:49:27 +0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macinto ...
show more
79.127.222.204 - - [25/Aug/2026:12:49:27 +0300] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
...
show less
Web App Attack
Hacking
๐บ๐ธ
antlac1
2026-08-25 09:45:38
(1 day ago)
crowdsecurity/CVE-2017-9841
Brute-Force
Web App Attack
๐ฉ๐ช
Hagen Schoebel
2026-08-25 09:15:23
(1 day ago)
Blocked by CrowdSec - crowdsecurity/vpatch-env-access (US)
Port Scan
Brute-Force
Web App Attack
SSH
๐ซ๐ท
bazter.pro
2026-08-25 09:06:01
(1 day ago)
Auto-Ban [2026-08-25 12:06:00]: CRITICAL: .env attack [Paths: 6] | Details: Exploit trap paths: /.en ...
show more
Auto-Ban [2026-08-25 12:06:00]: CRITICAL: .env attack [Paths: 6] | Details: Exploit trap paths: /.env, /.env, /173.212.225.158/.env, /173.212.225.158/.env, /vendor/.env | Sensitive files/paths: /.env, /.env, /173.212.225.158/.env, /173.212.225.158/.env, /vendor/.env | 404 errors (14): /admin/.env, /vendor/.env, /, /173.212.225.158/.env, /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, /.env
show less
Web App Attack
Hacking