๐ฏ๐ต
S.O.B.A. Dev.
2026-10-01 12:39:41
(1 day ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ฉ๐ช
hchristo
2026-09-30 07:35:59
(2 days ago)
[Wed Sep 30 09:35:58.257033 2026] [authz_core:error] [pid 53911:tid 53931] [remote 104.23.229.62:105 ...
show more
[Wed Sep 30 09:35:58.257033 2026] [authz_core:error] [pid 53911:tid 53931] [remote 104.23.229.62:10558] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env.bak
[Wed Sep 30 09:35:58.283791 2026] [authz_core:error] [pid 53911:tid 53948] [remote 104.23.229.62:10594] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env.save
[Wed Sep 30 09:35:58.302546 2026] [authz_core:error] [pid 53911:tid 53938] [remote 104.23.229.62:10546] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env.swp
[Wed Sep 30 09:35:58.310565 2026] [authz_core:error] [pid 53911:tid 53933] [remote 104.23.229.62:10600] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env.old
[Wed Sep 30 09:35:58.312538 2026] [authz_core:error] [pid 53911:tid 53935] [remote 104.23.229.62:10608] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env~
...
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-29 23:41:20
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.23.229.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.229.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 19:41:14.316011 2026] [security2:error] [pid 17527:tid 17527] [client 104.23.229.62:12337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atticlodgeoutdoorlearningcenter.com"] [uri "/.git/config"] [unique_id "arxMmsnHUp9C_S2YShcD6wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐น๐ท
ScchutzZ
2026-09-29 15:05:06
(3 days ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
๐ฉ๐ช
hchristo
2026-09-28 05:33:08
(4 days ago)
[Mon Sep 28 07:33:08.085855 2026] [authz_core:error] [pid 22128:tid 22141] [remote 104.23.229.62:107 ...
show more
[Mon Sep 28 07:33:08.085855 2026] [authz_core:error] [pid 22128:tid 22141] [remote 104.23.229.62:10743] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env.bak
[Mon Sep 28 07:33:08.127422 2026] [authz_core:error] [pid 22128:tid 22165] [remote 104.23.229.62:10767] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env.old
[Mon Sep 28 07:33:08.144062 2026] [authz_core:error] [pid 22128:tid 22178] [remote 104.23.229.62:10768] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env.save
[Mon Sep 28 07:33:08.151816 2026] [authz_core:error] [pid 22128:tid 22157] [remote 104.23.229.62:10736] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env.swp
[Mon Sep 28 07:33:08.164208 2026] [authz_core:error] [pid 22128:tid 22168] [remote 104.23.229.62:10764] AH01630: client denied by server configuration: /var/www/kd1125/htdocs/ownstore/.env~
...
show less
Brute-Force
๐ฉ๐ช
netclix.gr
2026-09-26 22:11:30
(5 days ago)
(PERMBLOCK) 104.23.229.62 (FR/France/-) has had more than 2 temp blocks in the last 604800 secs; Por ...
show more
(PERMBLOCK) 104.23.229.62 (FR/France/-) has had more than 2 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
๐ฉ๐ช
netclix.gr
2026-09-26 04:16:23
(6 days ago)
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 104.23.229.62 (FR/France/-): 1 in the last 46 ...
show more
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 104.23.229.62 (FR/France/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.23.229.62 - - [26/Sep/2026:07:16:00 +0300] "GET /login_up.php HTTP/2.0" 200 29667 "-" "Go-http-client/1.1" "163.172.66.206"'/login_up.php' '' '/opt/psa/admin/htdocs'
show less
Port Scan
๐ฉ๐ช
netclix.gr
2026-09-25 14:44:31
(1 week ago)
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 104.23.229.62 (FR/France/-): 1 in the last 46 ...
show more
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 104.23.229.62 (FR/France/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.23.229.62 - - [25/Sep/2026:17:43:43 +0300] "GET /login_up.php HTTP/2.0" 200 29670 "-" "Go-http-client/1.1" "62.210.70.254"'/login_up.php' '' '/opt/psa/admin/htdocs'
show less
Port Scan
๐ซ๐ท
dynamix
2026-09-24 21:37:43
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-09-19 04:32:20
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-09-17 21:18:52
(2 weeks ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-09-13 08:25:29
(2 weeks ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 05:50:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 104.23.229.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.229.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:50:20.364152 2026] [security2:error] [pid 14992:tid 14992] [client 104.23.229.62:12690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beechleafdesign.com"] [uri "/.git/HEAD"] [unique_id "ape5HP4t6mArGs-E2isW3QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-08-26 22:45:05
(1 month ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
chengkev
2026-08-26 15:18:01
(1 month ago)
Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-probing
Web App Attack
Hacking