🇫🇷
tilellit.pro
2026-06-20 14:54:09
(2 days ago)
Fail2Ban banned 104.234.32.43 for security violations in jail wp-armour. Log: 2026/06/20 14:54:08 [e ...
show more
Fail2Ban banned 104.234.32.43 for security violations in jail wp-armour. Log: 2026/06/20 14:54:08 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.234.32.43 | Target: wplogin" , client: 104.234.32.43, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-admin/"
...
show less
Web Spam
🇦🇺
screwlooseit.com.au
2026-04-07 01:42:28
(2 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
CA/Canada/-
Web App Attack
🇳🇱
Pornomens
2026-02-09 17:59:45
(4 months ago)
104.234.32.43 - - [09/Feb/2026:18:57:47 +0100] "GET / HTTP/1.1" 403 473 "-" "Mozilla/5.0 (X11; Ubunt ...
show more
104.234.32.43 - - [09/Feb/2026:18:57:47 +0100] "GET / HTTP/1.1" 403 473 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0"
104.234.32.43 - - [09/Feb/2026:18:59:37 +0100] "GET /.json HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36"
104.234.32.43 - - [09/Feb/2026:18:59:45 +0100] "GET /config.json HTTP/1.1" 403 4001 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-02 02:16:21
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 21:16:15.328913 2026] [security2:error] [pid 31851:tid 31851] [client 104.234.32.43:52449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.75"] [uri "/.env"] [unique_id "aYAI724PKwuZPYKEK6EiHAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 22:53:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 17:52:34.452142 2026] [security2:error] [pid 27460:tid 27460] [client 104.234.32.43:38287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.179"] [uri "/app/config/.env"] [unique_id "aX_ZMk_QF99zal2WDxievQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 19:48:38
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 14:48:25.528699 2026] [security2:error] [pid 5229:tid 5229] [client 104.234.32.43:55763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.249"] [uri "/old/.env"] [unique_id "aX-uCfy0ROwukGdxk4E3JgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 19:20:29
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 14:20:22.366349 2026] [security2:error] [pid 1688:tid 1688] [client 104.234.32.43:59451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.68"] [uri "/new/.env"] [unique_id "aX-ndkxGFLJWAWrx2dHaXgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 18:18:45
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 13:18:28.731083 2026] [security2:error] [pid 8130:tid 8130] [client 104.234.32.43:48155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.245"] [uri "/backend/.env"] [unique_id "aX-Y9Mh3TZrzCTKufPWU8wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 14:18:22
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 09:18:10.506031 2026] [security2:error] [pid 29907:tid 29907] [client 104.234.32.43:22713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.197"] [uri "/old/.env"] [unique_id "aX9gojw0b2Oo-MJGYE0GOAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 12:47:58
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 07:47:44.544896 2026] [security2:error] [pid 14467:tid 14467] [client 104.234.32.43:38169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.153"] [uri "/vendor/.env"] [unique_id "aX9LcAkXOjReIc6R1uExWgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 10:07:26
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 05:07:17.612058 2026] [security2:error] [pid 2763:tid 2763] [client 104.234.32.43:20349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.115"] [uri "/.env"] [unique_id "aX8l1c-mF1BYWSLnZXIXwwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-01-31 13:47:32
(4 months ago)
trolling for resource vulnerabilities
Web App Attack
🇬🇧
Axel
2026-01-31 02:14:44
(4 months ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /www/.env
Hacking
SQL Injection
Web App Attack
🇬🇧
gurnip
2026-01-30 21:09:41
(4 months ago)
Vulnerability probe of page /crm/.env, not found on server.
Brute-Force
Web App Attack
🇩🇪
barbarella
2026-01-29 13:34:55
(4 months ago)
Multiple (2) times attack on http port 80: Configuration snooping with .env file (GET /api/.env)
...
show more
Multiple (2) times attack on http port 80: Configuration snooping with .env file (GET /api/.env)
13:35:04 Configuration snooping with .env file (GET /www/.env)
show less
Hacking
Web App Attack