๐บ๐ธ
TPI-Abuse
2026-06-21 09:10:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 104.23.168.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.168.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 05:10:18.388668 2026] [security2:error] [pid 23797:tid 23797] [client 104.23.168.72:11276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jbccomputers.com.jbcllcnet.com"] [uri "/.env.dist"] [unique_id "ajeqeu15KH2dqjpHsJHGYQAAABo"], referer: https://www.google.com/search?q=www.jbccomputers.com.jbcllcnet.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-15 01:11:23
(1 week ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-06-09 02:11:01
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.23.168.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.168.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:10:55.051750 2026] [security2:error] [pid 12696:tid 12696] [client 104.23.168.72:10461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidrayskinner.bridgital.com"] [uri "/.git/config"] [unique_id "aid2L7NmLKbpVXYNUUOnmAAAAGU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
acadeova
2026-06-06 03:22:04
(2 weeks ago)
๐จ Recon detected (nft drop)
SRC=104.23.168.72
Observed=TCP dpt=80 in=enp0s6 ttl=58
Time=recent(journ ...
show more
๐จ Recon detected (nft drop)
SRC=104.23.168.72
Observed=TCP dpt=80 in=enp0s6 ttl=58
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
Anonymous
2026-05-27 08:02:39
(3 weeks ago)
104.23.168.72 - - [27/May/2026:10:02:38 +0200] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
104.23.168.72 - - [27/May/2026:10:02:38 +0200] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [27/May/2026:10:02:38 +0200] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [27/May/2026:10:02:38 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [27/May/2026:10:02:38 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [27/May/2026:10:02:38 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/
...
show less
Brute-Force
Web App Attack
Anonymous
2026-05-22 03:16:16
(1 month ago)
104.23.168.72 - - [22/May/2026:05:16:15 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.0" 404 ...
show more
104.23.168.72 - - [22/May/2026:05:16:15 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [22/May/2026:05:16:15 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [22/May/2026:05:16:16 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [22/May/2026:05:16:16 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [22/May/2026:05:16:16 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/
...
show less
Brute-Force
Web App Attack
Anonymous
2026-05-21 21:38:41
(1 month ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-05-20 00:50:31
(1 month ago)
104.23.168.72 - - [20/May/2026:02:50:30 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 ...
show more
104.23.168.72 - - [20/May/2026:02:50:30 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [20/May/2026:02:50:30 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [20/May/2026:02:50:31 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [20/May/2026:02:50:31 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
104.23.168.72 - - [20/May/2026:02:50:31 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 45
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-05-16 22:00:12
(1 month ago)
Auto-ban: >3000 req/min op 2026-05-16
Web App Attack
SSH
Hacking
๐ฏ๐ต
S.O.B.A. Dev.
2026-05-07 20:40:24
(1 month ago)
Persistent port scanning or vulnerability scanning
Port Scan
Anonymous
2026-05-06 23:16:49
(1 month ago)
Web App Attack
Brute-Force
Web App Attack
Anonymous
2026-05-02 02:05:42
(1 month ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-04-27 00:32:52
(1 month ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐ฆ๐บ
oncord
2026-04-25 12:11:18
(1 month ago)
Form spam
Web Spam
Anonymous
2026-04-25 07:43:46
(1 month ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack