🇫🇷
phoenix1jl96
2026-11-15 04:38:35
UTC ·
(12 hours ago)
2026/11/15 05:38:34 [error] 2093845#2093845: *660335 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.175.25.66, server: box.ledemon.us, request: "GET /mailer/.env HTTP/1.1", host: "d216-cloud-backup. ...
show more
2026/11/15 05:38:34 [error] 2093845#2093845: *660335 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.175.25.66, server: box.ledemon.us, request: "GET /mailer/.env HTTP/1.1", host: "d216-cloud-backup.direct.quickconnect.to"
2026/11/15 05:38:35 [error] 2093845#2093845: *660335 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.175.25.66, server: box.ledemon.us, request: "GET /mail/.env HTTP/1.1", host: "d216-cloud-backup.direct.quickconnect.to"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
2026-11-15 04:15:36
UTC ·
(12 hours ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
2026-11-15 03:54:30
UTC ·
(12 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-11-14 02:10:02
UTC ·
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-13 22:59:18
UTC ·
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-13
Web App Attack
SSH
Hacking
2026-11-13 22:20:03
UTC ·
(1 day ago)
Bot / scanning and/or hacking attempts: GET /mail/phpinfo.php HTTP/1.1, GET /beta/phpinfo.php HTTP/1.1, GET /www/phpinfo.php HTTP/1.1, GET /htdocs/phpinfo.php HTTP/1.1, GET /preview/phpinfo.php HTTP/1.1, GET /public_html/phpinfo.php HTTP/1.1, GET /we ...
show more
Bot / scanning and/or hacking attempts: GET /mail/phpinfo.php HTTP/1.1, GET /beta/phpinfo.php HTTP/1.1, GET /www/phpinfo.php HTTP/1.1, GET /htdocs/phpinfo.php HTTP/1.1, GET /preview/phpinfo.php HTTP/1.1, GET /public_html/phpinfo.php HTTP/1.1, GET /webroot/index.php/_environment HTTP/1.1, GET /qa/phpinfo.php HTTP/1.1, GET /staging/phpinfo.php HTTP/1.1, GET /phpinfo.php.save HTTP/1.1, GET /info.php.bak HTTP/1.1, GET /uat/phpinfo.php HTTP/1.1, GET /buildkite/.env HTTP/1.1, GET /elasticsearch/.env HTTP/1.1, GET /redis/.env HTTP/1.1, GET /actions/.env HTTP/1.1, GET /cd/.env HTTP/1.1, GET /worker/.env HTTP/1.1, GET /rabbitmq/.env HTTP/1.1, GET /jenkins/.env HTTP/1.1, GET /gitlab/.env HTTP/1.1, GET /kafka/.env HTTP/1.1, GET /mongodb/.env HTTP/1.1, GET /postgres/.env HTTP/1.1, GET /github/.env HTTP/1.1, GET /mysql/.env HTTP/1.1, GET /terraform/.env HTTP/1.1, GET /queue/.env HTTP/1.1, GET /travis/.env HTTP/1.1, GET /circleci/.env HTTP/1.1
show less
Hacking
Web App Attack
🇩🇪
et-a_network
2026-11-13 21:46:36
UTC ·
(1 day ago)
34.175.25.66 - - [13/Nov/2026:21:46:33 +0000] "GET /phpinfo.php HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host=e-pruef.et-a.eu via=172.64.198.178 rt=0.0 ...
show more
34.175.25.66 - - [13/Nov/2026:21:46:33 +0000] "GET /phpinfo.php HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host=e-pruef.et-a.eu via=172.64.198.178 rt=0.000
34.175.25.66 - - [13/Nov/2026:21:46:34 +0000] "GET /admin/phpinfo.php HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host=e-pruef.et-a.eu via=162.158.102.29 rt=0.000
...
show less
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-11-13 20:37:45
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.175.25.66 (ES/Spain/66.25.175.34.bc.googleusercontent.com)
SQL Injection
🇹🇭
thaizone.com
2026-11-13 19:41:02
UTC ·
(1 day ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
🇸🇪
vaia.cloud
2026-11-13 18:55:01
UTC ·
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇩🇪
netclix.gr
2026-11-13 17:49:37
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.175.25.66 (ES/Spain/66.25.175.34.bc.googleusercontent.com)
SQL Injection
🇬🇧
consul.to
2026-11-13 17:45:01
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 17:15:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.175.25.66 (66.25.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:15:40.637958 2026] [security2:error] [pid 14536:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.25.66 (66.25.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:15:40.637958 2026] [security2:error] [pid 14536:tid 14567] [client 34.175.25.66:53498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "e-dome.co.jp"] [uri "/.git/config"] [unique_id "avdFvOL8mH4HuL56JAJnWQAAAZQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-11-13 16:55:05
UTC ·
(1 day ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-11-13 16:19:36
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.175.25.66 (ES/Spain/66.25.175.34.bc.googleusercontent.com): (CF_ENABLE)
SQL Injection
