๐ฎ๐ณ
SignalZero
2026-10-25 10:59:56
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-10-24 13:41:08
(1 day ago)
fail2ban jail apache-scanner: 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.php HTTP/1. ...
show more
fail2ban jail apache-scanner: 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.php HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.dev HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.staging HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.development HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.development.local HTTP/1.1" 403 5
show less
Web App Attack
Port Scan
๐จ๐ฆ
zXero
2026-10-24 12:44:40
(1 day ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
Anonymous
2026-10-21 13:14:56
(4 days ago)
fail2ban jail apache-scanner: 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.php HTTP/1. ...
show more
fail2ban jail apache-scanner: 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.php HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.dev HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.staging HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.development HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.development.local HTTP/1.1" 403 5
show less
Web App Attack
Port Scan
๐จ๐ฆ
zXero
2026-10-21 12:22:03
(4 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
๐ซ๐ท
abuseipdb.amaze321
2026-10-17 06:38:53
(1 week ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
๐จ๐ฆ
zXero
2026-10-17 00:22:31
(1 week ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
๐จ๐ฆ
zXero
2026-10-15 12:08:16
(1 week ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
Anonymous
2026-10-10 02:52:04
(2 weeks ago)
fail2ban jail apache-scanner: 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.php HTTP/1. ...
show more
fail2ban jail apache-scanner: 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.php HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.dev HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.staging HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.development HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.development.local HTTP/1.1" 403 5
show less
Web App Attack
Port Scan
๐ฌ๐ง
thetomtaylor.co.uk
2026-10-06 13:08:02
(2 weeks ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx02,wa01,w ...
show more
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx02,wa01,wa02]
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
abuseipdb.amaze321
2026-10-03 06:34:52
(3 weeks ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
Anonymous
2026-10-01 13:09:19
(3 weeks ago)
fail2ban jail apache-scanner: 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.php HTTP/1. ...
show more
fail2ban jail apache-scanner: 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.php HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.dev HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.staging HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.development HTTP/1.1" 403 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 144.172.93.238 - - [25/Sep/2026:12:14:05 -0700] "GET /.env.development.local HTTP/1.1" 403 5
show less
Web App Attack
Port Scan
๐ซ๐ฎ
โ |สษงฤ
ษฦกแฟณ|โ
2026-10-01 06:11:10
(3 weeks ago)
[2026-10-01 06:11:10 UTC] Vulnerability/exploit scanning detected from 144.172.93.238 (238.93.172.14 ...
show more
[2026-10-01 06:11:10 UTC] Vulnerability/exploit scanning detected from 144.172.93.238 (238.93.172.144.static.cloudzy.com) PATHS: unknown
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
Gem
2026-09-30 21:04:30
(3 weeks ago)
Unauthorized web scan.
Web App Attack
๐ซ๐ท
Catalin Negru
2026-09-30 18:59:58
(3 weeks ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force