5.253.204.189

Blocked Script Kiddie Night Owl

Blocked since 17 Oct 2026 16:55 UTC, no end date. Our servers refuse it, web requests included, and it is in feed.txt.

Record

First seen on 2 Oct 2026 00:19 UTC, most recently active on 2 Oct 2026 00:19 UTC.

Recorded 3 attack-shaped requests across 1 separate day.

Its traffic requested a .env file, hoping to find API keys or database credentials (3 requests).

Seen by our web sensor, against odor-ex.com.

Scored into the "Script Kiddie" level now; the highest it has reached is "Scanner". Badge: Night Owl.

Routed via AS9009 (M247 Europe SRL), a hosting network.

Surfaces: web-app. Attack types: hunting for secrets. Seen by: web.

Active on 1 of the last 90 UTC days. Current block: 17 Oct 2026, with no end date.

Daily counts

Attack requests per UTC day, days with activity only
Day (UTC)	Requests
2 Oct 2026	3

At least 3 requests a minute at its peak (2 Oct 2026 00:19 UTC; identical requests in the same second are stored once).
Methods: GET 2.
The servers we watch answered: 403 2, 404 1 (totals only, from our web servers).

Newest first, the latest 50 stored requests grouped into runs. Times are UTC. The user agent is shown as its family only.

Evidence, newest first, grouped by UTC day
Time	Site	What happened	Request	User agent	Seen by
2 Oct 2026
00:19	odor-ex.com	requested a .env file, hoping to find API keys or database credentials	`/odor-ex.com/.env`	none	web
00:19	odor-ex.com	requested a .env file, hoping to find API keys or database credentials	`GET /.env`	browser claim	web
00:19	odor-ex.com	requested a .env file, hoping to find API keys or database credentials	`GET /.env.example`	browser claim	web

What readers make of this address. Verdicts are opinions of signed-in Academy members. They never change blocking or reporting.

No verdicts yet.