🇷🇴
iulianh
2026-07-15 05:24:19
(2 days ago)
25,465,587
Brute-Force
SSH
🇨🇿
lp
2026-07-15 00:19:30
(3 days ago)
Email account brute force: 1 attempts were recorded from 104.28.159.142
2026-07-15T01:41:42+02:00 wa ...
show more
Email account brute force: 1 attempts were recorded from 104.28.159.142
2026-07-15T01:41:42+02:00 warning: unknown[104.28.159.142]: SASL PLAIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
🇺🇸
canine.tools
2026-07-14 23:35:13
(3 days ago)
[fail2ban Auto Report] {"time":"2026-07-14T19:35:12.884694057-04:00","level":"INFO","source":{"funct ...
show more
[fail2ban Auto Report] {"time":"2026-07-14T19:35:12.884694057-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/search","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/128.0.0.0 Safari/537.36","accept_language":"en-US,en;q=0.9","priority":"","x-forwarded-for":"104.28.159.142","x-real-ip":"104.28.159.142","host":"searxng.canine.tools","check_result":{"name":"bot/headless-chrome","rule":"DENY","weight":0}}
...
show less
Bad Web Bot
2026-07-09 04:30:38
(1 week ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇫🇷
tecnicorioja
2026-07-03 06:00:41
(2 weeks ago)
SASL LOGIN authentication failed Jul 03 04:18:55
Brute-Force
🇮🇹
VHosting
2026-06-16 23:57:24
(1 month ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇬🇧
f3sc
2026-05-05 11:48:50
(2 months ago)
[Tue May 05 13:48:48.961110 2026] [authz_core:error] [pid 395128:tid 140363121538816] [client 104.28 ...
show more
[Tue May 05 13:48:48.961110 2026] [authz_core:error] [pid 395128:tid 140363121538816] [client 104.28.159.142:60329] AH01630: client denied by server configuration: /var/www/html/fail2ban/.env.old
[Tue May 05 13:48:48.963286 2026] [authz_core:error] [pid 395127:tid 140363113146112] [client 104.28.159.142:60336] AH01630: client denied by server configuration: /var/www/html/fail2ban/.env~
[Tue May 05 13:48:48.963564 2026] [authz_core:error] [pid 395127:tid 140363121538816] [client 104.28.159.142:60322] AH01630: client denied by server configuration: /var/www/html/fail2ban/.env.swp
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-05-05 07:13:49
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 03:13:41.474699 2026] [security2:error] [pid 20295:tid 20295] [client 104.28.159.142:59771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kountz.org"] [uri "/.env.development"] [unique_id "afmYpdcjB-90FwD1leNEdAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 06:32:23
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 02:32:15.678896 2026] [security2:error] [pid 23892:tid 23892] [client 104.28.159.142:58364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kofcasamblea442.org"] [uri "/.env.bak"] [unique_id "afmO77MU1X4TczZ1Eho1rwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 05:12:39
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 01:12:33.092038 2026] [security2:error] [pid 7691:tid 7691] [client 104.28.159.142:59032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kinnen.org"] [uri "/.env.production"] [unique_id "afl8QQeD96-2nCT3ZympTwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 04:50:03
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 00:49:59.328993 2026] [security2:error] [pid 10396:tid 10396] [client 104.28.159.142:59829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kingdom-way.org"] [uri "/.env_secret"] [unique_id "afl29-FIAxoaIvCWzK2xMAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Kinsei Engineering Inc.
2026-05-04 20:16:46
(2 months ago)
UFW:High-frequency access to unused ports
Port Scan
🇺🇸
TPI-Abuse
2026-05-03 22:43:27
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 18:43:23.517808 2026] [security2:error] [pid 18690:tid 18690] [client 104.28.159.142:59959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kln.jp"] [uri "/.env.sample"] [unique_id "affPi7MA2izmoyNo6DSRNgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 09:28:53
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.159.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 05:28:48.169340 2026] [security2:error] [pid 3672:tid 3672] [client 104.28.159.142:59310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "q3.evolute.io"] [uri "/.env.development"] [unique_id "afRyUAGHiUtDmMg_OAj53AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-05-01 07:16:48
(2 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force