π³π±
Alt255
2026-09-24 09:40:56
(1 day ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.23.175.32 - - [24/Sep/2026:11:40:46 +0200] "GET /.git/config HTTP/1.1" 301 570 "https://www.google.com/search?q=www.0229575066.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-24 04:31:41
(1 day ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
πΊπΈ
TPI-Abuse
2026-09-23 15:41:21
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 104.23.175.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 104.23.175.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 11:41:14.209250 2026] [security2:error] [pid 10716:tid 10716] [client 104.23.175.32:9589] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sooperare.com|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sooperare.com"] [uri "/.env.bak"] [unique_id "arPzGukdkG4mNWMNLQrlTQAAABg"], referer: https://www.google.com/search?q=sooperare.com
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
robotstxt
2026-09-23 10:53:54
(2 days ago)
104.23.175.32 - - [23/Sep/2026:10:52:58 +0000] "GET /.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows ...
show more
104.23.175.32 - - [23/Sep/2026:10:52:58 +0000] "GET /.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.87.175" edge="104.23.175.32"
104.23.175.32 - - [23/Sep/2026:10:53:00 +0000] "GET /.env.local HTTP/2.0" 403 95701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.87.175" edge="104.23.175.32"
104.23.175.32 - - [23/Sep/2026:10:53:01 +0000] "GET /.env.production HTTP/2.0" 403 95610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.87.175" edge="104.23.175.32"
104.23.175.32 - - [23/Sep/2026:10:53:03 +0000] "GET /.env.staging HTTP/2.0" 403 95764 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.87.175" edge="104.23.175.32"
104.23.175.32 - - [23/Sep/2026:10:53:05 +0000]
...
show less
Web App Attack
π©πͺ
robotstxt
2026-09-22 11:29:45
(3 days ago)
104.23.175.32 - - [22/Sep/2026:11:28:40 +0000] "GET /.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (X11; Lin ...
show more
104.23.175.32 - - [22/Sep/2026:11:28:40 +0000] "GET /.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.108.158" edge="104.23.175.32"
104.23.175.32 - - [22/Sep/2026:11:29:34 +0000] "GET /.env.sample HTTP/2.0" 403 95862 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.108.158" edge="104.23.175.32"
104.23.175.32 - - [22/Sep/2026:11:29:36 +0000] "GET /.env.example HTTP/2.0" 403 95727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.108.158" edge="104.23.175.32"
104.23.175.32 - - [22/Sep/2026:11:29:38 +0000] "GET /.env.dev HTTP/2.0" 403 95696 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.101.108.158" edge="104.23.175.32"
104.23.175.32 - - [22/Sep/2026:11:29:40 +0000] "GET /.env.prod HTTP/2.0" 403 95913 "-" "M
...
show less
Web App Attack
π©πͺ
robotstxt
2026-09-21 19:50:52
(3 days ago)
104.23.175.32 - - [21/Sep/2026:19:49:57 +0000] "GET /.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows ...
show more
104.23.175.32 - - [21/Sep/2026:19:49:57 +0000] "GET /.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.50.113.69" edge="104.23.175.32"
104.23.175.32 - - [21/Sep/2026:19:49:58 +0000] "GET /.env.local HTTP/2.0" 403 95810 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.50.113.69" edge="104.23.175.32"
104.23.175.32 - - [21/Sep/2026:19:50:00 +0000] "GET /.env.production HTTP/2.0" 403 95923 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.50.113.69" edge="104.23.175.32"
104.23.175.32 - - [21/Sep/2026:19:50:02 +0000] "GET /.env.staging HTTP/2.0" 403 95713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.50.113.69" edge="104.23.175.32"
104.23.175.32 - - [21/Sep/2026:19:50:05 +0000] "GET
...
show less
Web App Attack
π©πͺ
FeG Deutschland
2026-09-21 05:41:59
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
Anonymous
2026-09-17 19:20:08
(1 week ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
π¨π±
ifiguero
2026-09-17 05:54:09
(1 week ago)
Web Attack (\x00\x00\x00\x00\x00). 7d ban
Web App Attack
π©πͺ
iNetWorker
2026-09-11 12:24:13
(1 week ago)
trolling for resource vulnerabilities
Web App Attack
π§πͺ
madeit
2026-09-09 14:06:01
(2 weeks ago)
Web App Attack
π«π·
mail.avx.gr
2026-09-09 03:49:08
(2 weeks ago)
(nginxENVSCAN) nginx environment-file scanner detected from 104.23.175.32 (SG/Singapore/-/Singapore/ ...
show more
(nginxENVSCAN) nginx environment-file scanner detected from 104.23.175.32 (SG/Singapore/-/Singapore/-)
show less
Hacking
πΊπΈ
CBJ
2026-09-08 17:37:19
(2 weeks ago)
fail2ban: apache-filepath-recon
...
Web App Attack
π΅π±
MatStef132
2026-08-29 09:34:42
(3 weeks ago)
MatShield L7: blocked on api.klovy.chat (ua-quarantined)
Bad Web Bot
π§πͺ
madeit
2026-08-28 07:30:55
(4 weeks ago)
Web App Attack