๐ง๐ช
madeit
2026-08-22 03:01:12
(42 minutes ago)
Web App Attack
๐ฉ๐ช
ut-addicted.com
2026-08-22 02:47:52
(56 minutes ago)
\[Sat Aug 22 04:47:49.756728 2026\] \[:error\] \[pid 29695:tid 140352503629568\] \[client 104.23.160 ...
show more
\[Sat Aug 22 04:47:49.756728 2026\] \[:error\] \[pid 29695:tid 140352503629568\] \[client 104.23.160.178:10287\] \[client 104.23.160.178\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/.git/HEAD"\] \[unique_id "aokN1XQufjVtHJ7FMirhvAAAAIw"\]
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Lino Project
2026-08-22 02:36:32
(1 hour ago)
104.23.160.178 - - [22/Aug/2026:04:36:31 +0200] "GET /.git/HEAD HTTP/2.0" 301 524 "-" "Mozilla/5.0 ( ...
show more
104.23.160.178 - - [22/Aug/2026:04:36:31 +0200] "GET /.git/HEAD HTTP/2.0" 301 524 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
cleverest.eu
2026-08-20 16:26:30
(1 day ago)
MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / vcs_probe"}
Web App Attack
Anonymous
2026-08-20 10:27:54
(1 day ago)
apache vulnerability scan
Web App Attack
๐ฉ๐ช
iNetWorker
2026-08-20 10:14:47
(1 day ago)
trolling for resource vulnerabilities
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-20 03:04:41
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 23:04:36.962718 2026] [security2:error] [pid 11539:tid 11539] [client 104.23.160.178:12105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proinser.imerka.com.mx"] [uri "/.git/HEAD"] [unique_id "aoZuxGR-iTBcT60bZ0D3XQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-20 00:56:35
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 20:56:29.393120 2026] [security2:error] [pid 28235:tid 28235] [client 104.23.160.178:11411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.michaelandkatie.us"] [uri "/.git/HEAD"] [unique_id "aoZQvZ9LgXvfmKnIrUDXjQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-20 00:37:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 20:37:04.625142 2026] [security2:error] [pid 26680:tid 26680] [client 104.23.160.178:11302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.grayarea.us"] [uri "/.git/config"] [unique_id "aoZMMBsuCY5m1zkNC3UhPwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-20 00:20:00
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 20:19:51.700978 2026] [security2:error] [pid 27948:tid 27975] [client 104.23.160.178:12297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "culturallyyours.org.lamco.us"] [uri "/.git/HEAD"] [unique_id "aoZIJ7sVzcYke7HPEhmYiwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-19 23:17:34
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 19:17:29.163507 2026] [security2:error] [pid 30888:tid 30888] [client 104.23.160.178:9509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jdubindustries.jonathanwilson.me"] [uri "/.git/HEAD"] [unique_id "aoY5ibbAboOBwzDaIPI-9gAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-19 21:57:39
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.160.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 17:57:33.708743 2026] [security2:error] [pid 4641:tid 4641] [client 104.23.160.178:11210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.manoli.cl"] [uri "/.git/HEAD"] [unique_id "aoYmzQvji4-7Qi8NBPocjwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ญ๐บ
bcsaba
2026-08-19 16:54:16
(2 days ago)
Probing for .git:
104.23.160.178 - - [19/Aug/2026:18:54:13 +0200] "GET /.git/config HTTP/2.0" 403 14 ...
show more
Probing for .git:
104.23.160.178 - - [19/Aug/2026:18:54:13 +0200] "GET /.git/config HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Web App Attack
๐ซ๐ฎ
inlink.ltd
2026-08-19 11:07:04
(2 days ago)
dot file probe
Web App Attack
Anonymous
2026-08-17 19:09:13
(4 days ago)
Attack detected: 104.23.160.178 [2026-08-17]
Categories: 21
--- wp2shell/batch exploit (1 hits) ---
...
show more
Attack detected: 104.23.160.178 [2026-08-17]
Categories: 21
--- wp2shell/batch exploit (1 hits) ---
104.23.160.178 - - [17/Aug/2026:19:00:21 +0000] "GET /?rest_route=/batch/v1 HTTP/2.0" 404 950 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Web App Attack