๐บ๐ธ
mnsf
2026-06-05 02:05:08
(2 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-05-08 09:26:30
(4 weeks ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ต๐ฑ
SwiftServer
2026-03-26 02:15:32
(2 months ago)
104.23.229.3 - - [26/Mar/2026:04:15:30 +0200] "GET /.env.prod HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Wi ...
show more
104.23.229.3 - - [26/Mar/2026:04:15:30 +0200] "GET /.env.prod HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [26/Mar/2026:04:15:30 +0200] "GET /.env.dev HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [26/Mar/2026:04:15:30 +0200] "GET /.env.local HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [26/Mar/2026:04:15:30 +0200] "GET /.env.uat HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
...
show less
Brute-Force
Web App Attack
๐ต๐ฑ
SwiftServer
2026-03-24 18:08:14
(2 months ago)
104.23.229.3 - - [24/Mar/2026:20:08:12 +0200] "GET /s3/.aws/config HTTP/1.1" 403 134 "-" "curl/8.7.1 ...
show more
104.23.229.3 - - [24/Mar/2026:20:08:12 +0200] "GET /s3/.aws/config HTTP/1.1" 403 134 "-" "curl/8.7.1"
104.23.229.3 - - [24/Mar/2026:20:08:12 +0200] "GET /.aws/config HTTP/1.1" 403 134 "-" "curl/8.7.1"
104.23.229.3 - - [24/Mar/2026:20:08:13 +0200] "GET /.aws/credentials HTTP/1.1" 403 134 "-" "curl/8.7.1"
104.23.229.3 - - [24/Mar/2026:20:08:13 +0200] "GET /.env.aws HTTP/1.1" 403 134 "-" "curl/8.7.1"
104.23.229.3 - - [24/Mar/2026:20:08:14 +0200] "GET /s3/.env.bak HTTP/1.1" 403 134 "-" "curl/8.7.1"
...
show less
Brute-Force
Web App Attack
๐ต๐ฑ
SwiftServer
2026-03-23 09:33:16
(2 months ago)
104.23.229.3 - - [23/Mar/2026:11:33:12 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows ...
show more
104.23.229.3 - - [23/Mar/2026:11:33:12 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [23/Mar/2026:11:33:14 +0200] "GET /.env.prod HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [23/Mar/2026:11:33:14 +0200] "GET /.env.backup HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [23/Mar/2026:11:33:14 +0200] "GET /.env.save HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge
...
show less
Brute-Force
Web App Attack
๐ต๐ฑ
SwiftServer
2026-03-21 23:52:14
(2 months ago)
104.23.229.3 - - [22/Mar/2026:01:52:13 +0200] "GET /api/shared/config/.env HTTP/1.1" 403 195 "-" "Mo ...
show more
104.23.229.3 - - [22/Mar/2026:01:52:13 +0200] "GET /api/shared/config/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [22/Mar/2026:01:52:13 +0200] "GET /laravel/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [22/Mar/2026:01:52:14 +0200] "GET /new/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.23.229.3 - - [22/Mar/2026:01:52:14 +0200] "GET /crm/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2026-03-21 03:06:21
(2 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2026-03-20 02:06:54
(2 months ago)
Scanning/Probing (29)
Brute-Force
Web App Attack
๐ฎ๐ฉ
gonet.home
2026-03-07 00:50:05
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=5
Brute-Force
๐ฉ๐ช
SwiftServer
2026-03-05 10:44:54
(3 months ago)
104.23.229.3 - - [05/Mar/2026:12:44:54 +0200] "GET /.env.example HTTP/1.1" 403 134 "-" "curl/8.7.1"
...
show more
104.23.229.3 - - [05/Mar/2026:12:44:54 +0200] "GET /.env.example HTTP/1.1" 403 134 "-" "curl/8.7.1"
104.23.229.3 - - [05/Mar/2026:12:44:54 +0200] "GET /api/.env HTTP/1.1" 403 134 "-" "curl/8.7.1"
104.23.229.3 - - [05/Mar/2026:12:44:54 +0200] "GET /laravel/.env HTTP/1.1" 403 134 "-" "curl/8.7.1"
104.23.229.3 - - [05/Mar/2026:12:44:54 +0200] "GET /.git HTTP/1.1" 403 134 "-" "curl/8.7.1"
104.23.229.3 - - [05/Mar/2026:12:44:54 +0200] "GET /.git/HEAD HTTP/1.1" 403 134 "-" "curl/8.7.1"
...
show less
Brute-Force
Web App Attack
๐ฎ๐ฉ
gonet.home
2026-03-05 00:50:05
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=5
Brute-Force
๐ฎ๐ฉ
gonet.home
2026-03-03 00:50:04
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=5
Brute-Force
Anonymous
2026-03-02 04:40:40
(3 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐ฎ๐ฉ
gonet.home
2026-03-02 00:50:01
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=5
Brute-Force
๐ฉ๐ช
acadeova
2026-02-23 12:48:47
(3 months ago)
๐จ Recon detected (nft drop)
SRC=104.23.229.3
Observed=TCP dpt=80 in=enp0s6 ttl=58
Time=recent(journa ...
show more
๐จ Recon detected (nft drop)
SRC=104.23.229.3
Observed=TCP dpt=80 in=enp0s6 ttl=58
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan