๐ธ๐ฌ
securejdprop
2026-06-03 02:55:42
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack
๐ท๐บ
DZBOT
2026-05-20 09:51:18
(2 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-17 11:07:49
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.23.217.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.217.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 07:07:45.831340 2026] [security2:error] [pid 13297:tid 13297] [client 104.23.217.4:10456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flowershopverdementa.com"] [uri "/.git/config"] [unique_id "agmhgSrqT3ZcN1xdIC7qsAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-12 19:35:19
(3 weeks ago)
(caddyscan) Scanner path probe from 104.23.217.4 (SE/Sweden/-): 5 in the last 3600 secs; Ports: *; D ...
show more
(caddyscan) Scanner path probe from 104.23.217.4 (SE/Sweden/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 104.23.217.4 - - [12/May/2026:19:33:02 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.23.217.4 - - [12/May/2026:19:33:04 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.23.217.4 - - [12/May/2026:19:33:16 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.23.217.4 - - [12/May/2026:19:34:11 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.23.217.4 - - [12/May/2026:19:35:12 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
๐บ๐ธ
WellSpring
2026-05-03 07:17:12
(1 month ago)
wordpress scan on 217.today/wp-admin/install.php โ WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot
Web App Attack
๐ฉ๐ช
acadeova
2026-05-01 12:02:12
(1 month ago)
๐จ Recon detected (nft drop)
SRC=104.23.217.4
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journa ...
show more
๐จ Recon detected (nft drop)
SRC=104.23.217.4
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฉ๐ช
acadeova
2026-04-26 13:24:09
(1 month ago)
๐จ Recon detected (nft drop)
SRC=104.23.217.4
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journa ...
show more
๐จ Recon detected (nft drop)
SRC=104.23.217.4
Observed=TCP dpt=80 in=enp0s6 ttl=57
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฉ๐ช
psauxit
2026-04-26 05:33:03
(1 month ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Web App Attack
Hacking
๐ง๐พ
lns.bz
2026-04-24 00:44:34
(1 month ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
walnuts
2026-04-14 05:54:05
(1 month ago)
Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server
Bad Web Bot
Web App Attack
Anonymous
2026-03-27 08:09:31
(2 months ago)
104.23.217.4 - - [27/Mar/2026:10:08:53 +0200] "GET /wordpress/wp-admin/setup-config.php HTTP/1.0" 40 ...
show more
104.23.217.4 - - [27/Mar/2026:10:08:53 +0200] "GET /wordpress/wp-admin/setup-config.php HTTP/1.0" 404 475 "-" "https://neomilmarfisheriesaquaculture.com/wordpress/wp-admin/setup-config.php"
104.23.217.4 - - [27/Mar/2026:10:08:53 +0200] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 404 256 "-" "https://neomilmarfisheriesaquaculture.com/wordpress/wp-admin/setup-config.php"
104.23.217.4 - - [27/Mar/2026:10:08:53 +0200] "GET /wp-admin/setup-config.php HTTP/1.0" 404 475 "-" "https://neomilmarfisheriesaquaculture.com/wp-admin/setup-config.php"
104.23.217.4 - - [27/Mar/2026:10:08:53 +0200] "GET /wp-admin/setup-config.php HTTP/1.1" 404 256 "-" "https://neomilmarfisheriesaquaculture.com/wp-admin/setup-config.php"
104.23.217.4 - - [27/Mar/2026:10:09:30 +0200] "GET /wp-admin/setup-config.php HTTP/1.0" 404 475 "-" "http://neomilmarfisheriesaquaculture.com/wp-admin/setup-config.php"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-03-23 22:50:33
(2 months ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-03-21 15:45:24
(2 months ago)
104.23.217.4 - - [21/Mar/2026:17:42:59 +0200] "GET /wp-admin/setup-config.php HTTP/1.0" 404 475 "-" ...
show more
104.23.217.4 - - [21/Mar/2026:17:42:59 +0200] "GET /wp-admin/setup-config.php HTTP/1.0" 404 475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
104.23.217.4 - - [21/Mar/2026:17:42:59 +0200] "GET /wp-admin/setup-config.php HTTP/1.1" 404 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
104.23.217.4 - - [21/Mar/2026:17:45:23 +0200] "GET /wordpress/wp-admin/setup-config.php HTTP/1.0" 404 475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
104.23.217.4 - - [21/Mar/2026:17:45:23 +0200] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 404 256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36"
104.23.217.4 - - [21/Mar/2026:17:45:23 +0200] "GET /wp-admin/setup-config.php HTTP/1.0" 404 475 "-" "https://neomilmarfisher
...
show less
Brute-Force
Web App Attack
Anonymous
2026-01-25 03:30:10
(4 months ago)
| SQL injection attempt.
Hacking
SQL Injection
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-01-24 22:59:08
(4 months ago)
Auto-ban: >3000 req/min op 2026-01-24
Hacking
Web App Attack
SSH