Anonymous
2026-11-15 18:25:35
UTC ·
(22 minutes ago)
PROTO=TCP DPT=6666
Port Scan
Hacking
🇲🇽
LZ Servicios Digitales
2026-11-13 21:48:48
UTC ·
(1 day ago)
Reportado automáticamente desde LiquidaZona Cloud WAF.
Brute-Force
🇧🇷
radardatelecom
2026-11-12 16:55:04
UTC ·
(3 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇫🇷
phoenix1jl96
2026-11-12 15:52:20
UTC ·
(3 days ago)
2026/11/12 16:52:19 [error] 96551#96551: *584653 open() "/home/user-data/www/default/mailer" failed (2: No such file or directory), client: 144.31.25.99, server: box.ledemon.us, request: "GET /mailer HTTP/1.1", host: "82.64.186.34:443"
2026/11/12 16: ...
show more
2026/11/12 16:52:19 [error] 96551#96551: *584653 open() "/home/user-data/www/default/mailer" failed (2: No such file or directory), client: 144.31.25.99, server: box.ledemon.us, request: "GET /mailer HTTP/1.1", host: "82.64.186.34:443"
2026/11/12 16:52:19 [error] 96551#96551: *584654 open() "/home/user-data/www/default/mailer_config" failed (2: No such file or directory), client: 144.31.25.99, server: box.ledemon.us, request: "GET /mailer_config HTTP/1.1", host: "82.64.186.34:443"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
🇿🇦
conure.sh
2026-11-12 09:26:41
UTC ·
(3 days ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s
Web App Attack
🇬🇧
jackalek
2026-11-12 08:38:41
UTC ·
(3 days ago)
144.31.25.99 - - [12/Nov/2026:08:38:40 +0000] "GET /.development.env HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
144.31.25.99 - - [12/Nov/2026:0 ...
show more
144.31.25.99 - - [12/Nov/2026:08:38:40 +0000] "GET /.development.env HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
144.31.25.99 - - [12/Nov/2026:08:38:40 +0000] "GET /.env.development HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
144.31.25.99 - - [12/Nov/2026:08:38:40 +0000] "GET /.env.development.local HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
144.31.25.99 - - [12/Nov/2026:08:38:40 +0000] "GET /.env.dev HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
144.31.25.99 - - [12/Nov/2026:08:38:40 +0000] "GET /.env.azure HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17
...
show less
Brute-Force
Web App Attack
🇸🇪
1337v411
2026-11-12 08:13:59
UTC ·
(3 days ago)
[2026-11-12T08:13:59+00:00] uri="/.env.dev" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
[2026-11-12T08:13:59+00:00] uri="/.env" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ...
show more
[2026-11-12T08:13:59+00:00] uri="/.env.dev" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
[2026-11-12T08:13:59+00:00] uri="/.env" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
[2026-11-12T08:13:59+00:00] uri="/.env.development.local" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Bad Web Bot
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-12 05:45:51
UTC ·
(3 days ago)
Web scan: request for a sensitive file (.env, .git, wp-config...)
Web App Attack
Bad Web Bot
Anonymous
2026-11-12 05:37:46
UTC ·
(3 days ago)
Aggressive Robot or Attack DDOS
DDoS Attack
🇳🇱
middelkoopcc
2026-11-12 01:49:01
UTC ·
(3 days ago)
2026-11-12 02:47:32 GET /.env.dev [404] && 2026-11-12 02:47:32 GET /.development.env [404] && 2026-11-12 02:47:32 GET /.env [404] && 306 more within 20 minutes
Web App Attack
🇯🇵
amyriad
2026-11-12 00:33:19
UTC ·
(3 days ago)
144.31.25.99 - - [12/Nov/2026:00:33:18 +0000] "GET /.env.ci HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
144.31.25.99 - - [12/Nov/2026:00:33:18 +0000] "GE ...
show more
144.31.25.99 - - [12/Nov/2026:00:33:18 +0000] "GET /.env.ci HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
144.31.25.99 - - [12/Nov/2026:00:33:18 +0000] "GET /.env.development.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
144.31.25.99 - - [12/Nov/2026:00:33:18 +0000] "GET /.env.aws HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Hacking
Brute-Force
🇮🇹
madaello
2026-11-11 17:34:25
UTC ·
(4 days ago)
144.31.25.99 - - [11/Nov/2026:18:34:25 +0100] "GET /.env HTTP/1.1" 301 575 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
144.31.25.99 - - [11/Nov/2026:18:34:25 +0100] "GET /.env. ...
show more
144.31.25.99 - - [11/Nov/2026:18:34:25 +0100] "GET /.env HTTP/1.1" 301 575 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
144.31.25.99 - - [11/Nov/2026:18:34:25 +0100] "GET /.env.development HTTP/1.1" 301 599 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
144.31.25.99 - - [11/Nov/2026:18:34:25 +0100] "GET /.env.ci HTTP/1.1" 301 581 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
144.31.25.99 - - [11/Nov/2026:18:34:25 +0100] "GET /.env.development.local HTTP/1.1" 301 611 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Hacking
🇩🇪
EnthecSolutions
2026-11-11 06:01:21
UTC ·
(4 days ago)
Detected by Enthec Solutions. | Attempts: 957 in 24h | Target port: 80
Web App Attack
🇫🇷
Jager
2026-11-11 03:55:53
UTC ·
(4 days ago)
Blocked by CrowdSec on homelab for scenario: crowdsecurity/http-sensitive-files
Brute-Force
Port Scan
Web App Attack
🇫🇮
23p02732
2026-11-11 02:50:49
UTC ·
(4 days ago)
Mailserver and mailaccount attacks
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack