IP Address: 74.0.32.57

Automated web attack: 5 reqs, 1 paths probed; probed: 1 .env

SSH (TCP/22): 17 login attempts, 3 distinct usernames, 2 distinct passwords | Automated web attack: 39 reqs, 4 paths probed, 14 returned 404; signals: stolen-credential-use; probed: 2 .php, 1 .env, 1 admin

SSH (TCP/22): 16 login attempts, 3 distinct usernames, 2 distinct passwords | Automated web attack: 28 reqs, 4 paths probed, 11 returned 404; signals: stolen-credential-use; probed: 2 .php, 1 .env, 1 admin

SSH (TCP/22): 9 login attempts, 3 distinct usernames, 2 distinct passwords | Automated web attack: 153 reqs, 28 paths probed, 91 returned 404; signals: stolen-credential-use; probed: 15 .php, 11 .env, 1 .git, 1 admin

SSH (TCP/22): 11 login attempts, 3 distinct usernames, 2 distinct passwords | Automated web attack: 107 reqs, 28 paths probed, 64 returned 404; signals: stolen-credential-use; probed: 15 .php, 11 .env, 1 .git, 1 admin

SSH (TCP/22): 8 login attempts, 3 distinct usernames, 2 distinct passwords | Automated web attack: 165 reqs, 42 paths probed, 118 returned 404; signals: stolen-credential-use; probed: 24 .env, 15 .php, 1 .git, 1 admin, 1 other

Automated web attack: 9 reqs, 1 paths probed; sample: /.env

SSH: 35 login attempts, targeted users: [x], root, stg | Automated web attack: 430 reqs, 43 paths probed, 315 returned 404; sample: /.env, /.env.development, /.env.dist, /.env.old, /.env.prod, /.env.production, /.env.project, /.env.save, /.git/config, /PMA/index.php, /admin-app/.env, /admin/adminer.php, /adminer.php, /api/.env, /app/.env, /application/.env, /apps/.env, /cms/.env, /cp/.env, /docker/.env, /enviroments/.env, /fedex/.env, /laravel/.env, /local/.env, /myadmin/index.php, /mysql-admin/index.php, /mysqladmin/index.php, /phpMyAdmin-2/index.php, /phpMyAdmin/index.php, /phpMyAdmin2/index.php, /phpmyadmin, /phpmyadmin/index.php, /phpmyadmin2/index.php, /pma/index.php, /private/.env, /rest/.env, /script/.env, /sources/.env, /sqlmanager/index.php, /system/.env, /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, /webdb/index.php, /live_env