Anonymous
2026-07-30 12:01:47
(3 hours ago)
[Thu Jul 30 14:01:46.317161 2026] [authz_core:error] [pid 16551] [client 108.162.241.28:11191] AH016 ...
show more
[Thu Jul 30 14:01:46.317161 2026] [authz_core:error] [pid 16551] [client 108.162.241.28:11191] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Jul 30 14:01:46.451744 2026] [authz_core:error] [pid 16551] [client 108.162.241.28:11191] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Jul 30 14:01:46.573243 2026] [authz_core:error] [pid 16551] [client 108.162.241.28:11191] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-07-30 11:24:11
(4 hours ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ฉ๐ช
Zydzy
2026-07-29 16:04:23
(23 hours ago)
Automated attack detected. Server: 95.140.154.181. Jail: nginx-exploit.
Web App Attack
Anonymous
2026-07-28 05:13:27
(2 days ago)
108.162.241.28 - - [28/Jul/2026:07:13:19 +0200] "GET /config/production.json HTTP/1.1" 404 445 "-" " ...
show more
108.162.241.28 - - [28/Jul/2026:07:13:19 +0200] "GET /config/production.json HTTP/1.1" 404 445 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.28 - - [28/Jul/2026:07:13:19 +0200] "GET /config/production.json HTTP/1.1" 404 249 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.28 - - [28/Jul/2026:07:13:21 +0200] "GET /config/local.json HTTP/1.1" 404 445 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.28 - - [28/Jul/2026:07:13:21 +0200] "GET /config/local.json HTTP/1.1" 404 249 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.28 - - [28/Jul/2026:07:13:21 +0200] "GET /config/development.json HTTP/1.1" 404 445 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.28 - - [28/Jul/2026:07:13:21 +0200] "GET /config/development.json HTTP/1.1" 404 249 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.28 - - [28/Jul/2026:07:13:21 +0200] "GET /.env.test HTTP/1.1" 404 445 "-" "Mozilla/5.0 (compatible; Security
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-07-26 15:52:30
(3 days ago)
108.162.241.28 - - [26/Jul/2026:17:52:29 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
108.162.241.28 - - [26/Jul/2026:17:52:29 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [26/Jul/2026:17:52:29 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [26/Jul/2026:17:52:29 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [26/Jul/2026:17:52:29 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [26/Jul/2026:17:52:30 +0200] "GET //test/wp-includes/wlwmanifest.xml HT
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
acadeova
2026-07-25 16:09:50
(4 days ago)
๐จ Recon detected (nft drop)
SRC=108.162.241.28
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=108.162.241.28
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
Anonymous
2026-07-23 18:51:46
(6 days ago)
108.162.241.28 - - [23/Jul/2026:20:51:45 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
108.162.241.28 - - [23/Jul/2026:20:51:45 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [23/Jul/2026:20:51:45 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [23/Jul/2026:20:51:45 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [23/Jul/2026:20:51:45 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [23/Jul/2026:20:51:46 +0200] "GET //shop/wp-includes/wlwmanifest.xml
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-22 12:20:12
(1 week ago)
108.162.241.28 - - [22/Jul/2026:14:20:11 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
108.162.241.28 - - [22/Jul/2026:14:20:11 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
108.162.241.28 - - [22/Jul/2026:14:20:11 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
108.162.241.28 - - [22/Jul/2026:14:20:11 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
108.162.241.28 - - [22/Jul/2026:14:20:11 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
108.162.241.28 - - [22/Jul/2026:14:20:12 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml H
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-20 04:27:06
(1 week ago)
108.162.241.28 - - [20/Jul/2026:06:27:05 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
108.162.241.28 - - [20/Jul/2026:06:27:05 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [20/Jul/2026:06:27:05 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [20/Jul/2026:06:27:05 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [20/Jul/2026:06:27:05 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.28 - - [20/Jul/2026:06:27:05 +0200] "GET //media/wp-includes/wlwmanifest.xml H
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-18 13:30:50
(1 week ago)
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 404 445 "-" ...
show more
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 404 445 "-" "TLM-Audit-Scanner/1.0"
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 404 249 "-" "TLM-Audit-Scanner/1.0"
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.dockerignore HTTP/1.1" 404 445 "-" "TLM-Audit-Scanner/1.0"
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.dockerignore HTTP/1.1" 404 249 "-" "TLM-Audit-Scanner/1.0"
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.env HTTP/1.1" 404 445 "-" "TLM-Audit-Scanner/1.0"
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.env HTTP/1.1" 404 249 "-" "TLM-Audit-Scanner/1.0"
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.env-sample HTTP/1.1" 404 445 "-" "TLM-Audit-Scanner/1.0"
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.env-sample HTTP/1.1" 404 249 "-" "TLM-Audit-Scanner/1.0"
108.162.241.28 - - [18/Jul/2026:15:30:49 +0200] "GET /.env.aws HTTP/1.1" 404 445 "-" "TL
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-07-17 19:27:50
(1 week ago)
[Fri Jul 17 21:27:49.207427 2026] [authz_core:error] [pid 16494] [client 108.162.241.28:9399] AH0163 ...
show more
[Fri Jul 17 21:27:49.207427 2026] [authz_core:error] [pid 16494] [client 108.162.241.28:9399] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jul 17 21:27:49.376613 2026] [authz_core:error] [pid 16494] [client 108.162.241.28:9399] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jul 17 21:27:49.501145 2026] [authz_core:error] [pid 16494] [client 108.162.241.28:9399] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-17 18:24:32
(1 week ago)
[Fri Jul 17 20:24:31.864907 2026] [authz_core:error] [pid 15740] [client 108.162.241.28:13383] AH016 ...
show more
[Fri Jul 17 20:24:31.864907 2026] [authz_core:error] [pid 15740] [client 108.162.241.28:13383] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jul 17 20:24:32.008241 2026] [authz_core:error] [pid 15740] [client 108.162.241.28:13383] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jul 17 20:24:32.133708 2026] [authz_core:error] [pid 15740] [client 108.162.241.28:13383] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-17 02:03:10
(1 week ago)
[Fri Jul 17 04:03:09.687777 2026] [authz_core:error] [pid 26235] [client 108.162.241.28:12654] AH016 ...
show more
[Fri Jul 17 04:03:09.687777 2026] [authz_core:error] [pid 26235] [client 108.162.241.28:12654] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jul 17 04:03:10.066015 2026] [authz_core:error] [pid 26235] [client 108.162.241.28:12654] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Jul 17 04:03:10.352686 2026] [authz_core:error] [pid 26235] [client 108.162.241.28:12654] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-14 09:52:20
(2 weeks ago)
108.162.241.28 - - [14/Jul/2026:11:52:20 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
108.162.241.28 - - [14/Jul/2026:11:52:20 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
108.162.241.28 - - [14/Jul/2026:11:52:20 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
108.162.241.28 - - [14/Jul/2026:11:52:20 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
108.162.241.28 - - [14/Jul/2026:11:52:20 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
108.162.241.28 - - [14/Jul/2026:11:52:20 +0200] "GET //test/wp-includes/wlwmanifest.xml HT
...
show less
Brute-Force
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-07-12 17:02:17
(2 weeks ago)
Persistent port scanning or vulnerability scanning
Port Scan