π«π·
pm33
2026-10-19 23:41:37
(6 days ago)
Unauthorized connections HTTP 403
Web App Attack
π©πͺ
Roper123
2026-10-19 23:41:34
(6 days ago)
Web exploits
Web App Attack
π«π·
security.rdmc.fr
2026-10-19 23:40:57
(6 days ago)
Activity from blacklisted IP
Hacking
π¦πΊ
HostFission
2026-10-03 03:49:20
(3 weeks ago)
PSAD port scan detected
Port Scan
π©πͺ
Roper123
2026-10-03 02:48:40
(3 weeks ago)
Web exploits
Web App Attack
π§π·
rotabrrmds
2026-10-02 16:51:04
(3 weeks ago)
Automated report by Fail2Ban - jail ufw-scan
Port Scan
Anonymous
2026-10-02 10:04:29
(3 weeks ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show more
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy β zero tolerance for exploit scanning. Banned Oct 2, 10:04 UTC. Origin: Germany, Frankfurt am Main.
show less
Hacking
Bad Web Bot
Web App Attack
π³π±
Site.eu
2026-09-23 05:25:36
(1 month ago)
Excessive 404/403 errors
Brute-Force
π³π±
debestelapp
2026-09-22 15:25:11
(1 month ago)
Web App Attack
π³π±
Site.eu
2026-09-20 15:41:50
(1 month ago)
Excessive 404/403 errors
Brute-Force
πΊπΈ
TPI-Abuse
2026-09-20 12:44:21
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 23.132.164.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.132.164.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:44:16.455536 2026] [security2:error] [pid 11385:tid 11385] [client 23.132.164.41:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "api.nsfwmanager.com"] [uri "/.env"] [unique_id "aq_VIJvWEGsYW4OlhG2-UAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
robotstxt
2026-09-19 12:43:19
(1 month ago)
23.132.164.41 - - [19/Sep/2026:12:42:18 +0000] "GET /.env HTTP/2.0" 403 0 "-" "curl/8.6.0" "-" edge= ...
show more
23.132.164.41 - - [19/Sep/2026:12:42:18 +0000] "GET /.env HTTP/2.0" 403 0 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [19/Sep/2026:12:42:18 +0000] "GET /config.json HTTP/2.0" 403 0 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [19/Sep/2026:12:42:18 +0000] "GET /.svn/reconx-a19fc5f173ea HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" edge="23.132.164.41"
23.132.164.41 - - [19/Sep/2026:12:42:23 +0000] "POST / HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" edge="23.132.164.41"
23.132.164.41 - - [19/Sep/2026:12:42:25 +0000] "POST /login/ HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" "-" edge="23.132.164.41"
...
show less
Web App Attack
πͺπΈ
robotstxt
2026-09-19 07:56:43
(1 month ago)
23.132.164.41 - - [19/Sep/2026:07:55:41 +0000] "GET /config.json HTTP/2.0" 403 75737 "-" "curl/8.6.0 ...
show more
23.132.164.41 - - [19/Sep/2026:07:55:41 +0000] "GET /config.json HTTP/2.0" 403 75737 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [19/Sep/2026:07:55:41 +0000] "GET /wp-config.php HTTP/2.0" 403 75737 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [19/Sep/2026:07:55:41 +0000] "GET /.env.local HTTP/2.0" 403 75737 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [19/Sep/2026:07:55:42 +0000] "GET /.env/ HTTP/2.0" 403 75737 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [19/Sep/2026:07:55:42 +0000] "GET /.Env HTTP/2.0" 403 75737 "-" "curl/8.6.0" "-" edge="23.132.164.41"
...
show less
Web App Attack
πͺπΈ
robotstxt
2026-09-18 17:56:40
(1 month ago)
23.132.164.41 - - [18/Sep/2026:17:55:37 +0000] "GET /wp-config.php HTTP/2.0" 403 59509 "-" "curl/8.6 ...
show more
23.132.164.41 - - [18/Sep/2026:17:55:37 +0000] "GET /wp-config.php HTTP/2.0" 403 59509 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [18/Sep/2026:17:55:37 +0000] "GET /config.json HTTP/2.0" 403 59509 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [18/Sep/2026:17:55:39 +0000] "GET /.env.local HTTP/2.0" 403 59509 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [18/Sep/2026:17:55:39 +0000] "GET /.env/ HTTP/2.0" 403 59509 "-" "curl/8.6.0" "-" edge="23.132.164.41"
23.132.164.41 - - [18/Sep/2026:17:55:39 +0000] "GET /.env.production HTTP/2.0" 403 59509 "-" "curl/8.6.0" "-" edge="23.132.164.41"
...
show less
Web App Attack
π©πͺ
wassita
2026-09-18 11:19:25
(1 month ago)
automated scan probing admin-interface paths β requested path: /admin/.env β response: 404
Bad Web Bot
Web App Attack