🇿🇦
maximonline.co.za
2026-06-09 01:50:02
(1 week ago)
Brute Force SMTP AUTH Attack
Brute-Force
🇩🇪
Little Iguana
2025-04-02 11:49:55
(1 year ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
2025-03-21 00:05:48
(1 year ago)
Portscan: TCP/4443 (6x)
Port Scan
🇳🇱
JCB
2025-03-20 17:24:00
(1 year ago)
97.74.94.186 - - [20/Mar/2025:04:22:37 +0200] "HEAD /camera-cgi/admin/param.cgi?action=list&group=Pr ...
show more
97.74.94.186 - - [20/Mar/2025:04:22:37 +0200] "HEAD /camera-cgi/admin/param.cgi?action=list&group=Properties.Image HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
show less
Web App Attack
🇵🇱
rafix
2025-03-20 11:30:21
(1 year ago)
DDoS, #botnet20250220
DDoS Attack
Bad Web Bot
🇦🇹
Pingger Shikkoken
2025-03-20 11:28:24
(1 year ago)
2025-03-20T11:28:24+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2025-03-20T11:28:24+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:47:ce:08:00 SRC=97.74.94.186 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=485 DF PROTO=TCP SPT=60794 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2025-03-20T11:28:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:47:ce:08:00 SRC=97.74.94.186 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=486 DF PROTO=TCP SPT=60794 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
show less
Hacking
Bad Web Bot
2025-03-20 01:59:10
(1 year ago)
Malicious activity detected
Hacking
Brute-Force
🇩🇪
pigro
2025-03-19 08:11:11
(1 year ago)
97.74.94.186 - - [19/Mar/2025:09:10:47 +0100] "GET /public/.env/ HTTP/1.1" 404 2302 "-" "python-requ ...
show more
97.74.94.186 - - [19/Mar/2025:09:10:47 +0100] "GET /public/.env/ HTTP/1.1" 404 2302 "-" "python-requests/2.25.1"
97.74.94.186 - - [19/Mar/2025:09:11:11 +0100] "GET /admin/.env/ HTTP/1.1" 404 2302 "-" "python-requests/2.25.1"
...
show less
Web App Attack
🇮🇩
Burayot
2025-03-19 07:04:11
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 97.74.94.186 (US/United States/186.9 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 97.74.94.186 (US/United States/186.94.74.97.host.secureserver.net): 1 in the last 3600 secs
show less
Web App Attack
🇬🇧
openstrike.co.uk
2025-03-19 06:13:27
(1 year ago)
5 attacks on env grabbing URLs:
GET /.env.example HTTP/1.1
Hacking
🇩🇪
ps-center
2025-03-19 03:48:43
(1 year ago)
MYH: Web Attack GET /admin/.env
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇩🇪
HERA - Operations
2025-03-19 03:33:06
(1 year ago)
club-herrmann - searching for vulnerable scripts: .env 2025/03/19 04:33:06
Web App Attack
🇩🇪
nextweb
2025-03-19 01:53:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 97.74.94.186 (US/United States/-/-/186.94.74.97 ...
show more
(mod_security) mod_security (id:210492) triggered by 97.74.94.186 (US/United States/-/-/186.94.74.97.host.secureserver.net/[AS26496 AS-26496-GO-DADDY-COM-LLC]): 5 in the last 3600 secs (CF_ENABLE)
show less
Brute-Force
🇩🇪
Hary74656
2025-03-19 01:16:01
(1 year ago)
[Wed Mar 19 02:15:51.316481 2025] [:error] [pid 814195:tid 814252] [client 97.74.94.186:56632] [clie ...
show more
[Wed Mar 19 02:15:51.316481 2025] [:error] [pid 814195:tid 814252] [client 97.74.94.186:56632] [client 97.74.94.186] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "124"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "gate.weavernet.at"] [uri "/.env"] [unique_id "Z9oax-0F7crVBDTys2oEuwAAAwo"]
[Wed Mar 19 02:15:52.990574 2025] [:error] [pid 814350:tid 814460] [client 97.74.94.186:57852] [client 97.74.94.186] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQU
...
show less
Web App Attack
🇩🇪
Gwyneth Llewelyn
2025-03-18 20:00:49
(1 year ago)
2025/03/18 20:00:35 [error] 2586933#2586933: *6220307 access forbidden by rule, client: 97.74.94.186 ...
show more
2025/03/18 20:00:35 [error] 2586933#2586933: *6220307 access forbidden by rule, client: 97.74.94.186, server: simetria.org, request: "GET /category/encontros/.env HTTP/2.0", host: "blog.simetria.org"
2025/03/18 20:00:42 [error] 2586933#2586933: *6220362 access forbidden by rule, client: 97.74.94.186, server: simetria.org, request: "GET /category/encontros/public/.env HTTP/2.0", host: "blog.simetria.org"
2025/03/18 20:00:48 [error] 2586933#2586933: *6220412 access forbidden by rule, client: 97.74.94.186, server: simetria.org, request: "GET /category/encontros/staging/.env HTTP/2.0", host: "blog.simetria.org"
show less
Web App Attack