🇧🇪
madeit
2026-09-09 09:50:53
(45 minutes ago)
Web App Attack
🇧🇪
madeit
2026-08-23 11:24:36
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 23:53:46
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.162.226.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.226.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:53:39.081755 2026] [security2:error] [pid 1692:tid 1692] [client 108.162.226.67:10322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.franchiseconsultants.org"] [uri "/.git/config"] [unique_id "aoJNg6VPFrkRVvfotRz9xgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 20:43:30
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.162.226.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.226.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 16:43:23.680737 2026] [security2:error] [pid 26104:tid 26104] [client 108.162.226.67:11001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theateroobleck.com"] [uri "/.git/HEAD"] [unique_id "aoDPa0vARyIRrqKbNcxNvgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-08-15 00:13:52
(3 weeks ago)
Unauthorized access to webpage admin
Web App Attack
🇧🇪
madeit
2026-08-08 20:58:48
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 02:56:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 108.162.226.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.226.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 22:55:42.597214 2026] [security2:error] [pid 24433:tid 24433] [client 108.162.226.67:12221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.1729grove.steambalancing.com"] [uri "/.env.dusk.local"] [unique_id "af1Qrl27i1x2U8w4TAdh4QAAAAM"], referer: https://www.google.com/search?q=www.1729grove.steambalancing.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
OptimusGO
2026-04-20 15:31:15
(4 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-04-20 16:31:14 UTC
Log evidence:
show less
Port Scan
Brute-Force
🇬🇧
OptimusGO
2026-04-18 00:07:36
(4 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-04-18 01:07:36 UTC
Log evidence:
show less
Port Scan
Brute-Force
🇬🇧
OptimusGO
2026-04-15 13:27:14
(4 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-04-15 14:27:14 UTC
Log evidence:
show less
Port Scan
Brute-Force
🇬🇧
OptimusGO
2026-03-28 17:35:58
(5 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-03-28 17:35:58 UTC
Log evidence:
108.162.226.67 - - [28/Mar/2026:17:35:57 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
03/28/2026-17:35:57.711122 [wDrop] [**] [1:1000200:1] CRITICAL: Malicious Scanner User-Agent Detected [**] [Classification: Web Application Attack] [Priority: 1] {TCP} 108.162.226.67:10519 -> 185.127.18.66:80
show less
Port Scan
Brute-Force
🇩🇪
www.mammazone.it
2026-03-16 02:55:14
(5 months ago)
[Mon Mar 16 03:55:14.538338 2026] [autoindex:error] [pid 449994] [client 108.162.226.67:11366] AH012 ...
show more
[Mon Mar 16 03:55:14.538338 2026] [autoindex:error] [pid 449994] [client 108.162.226.67:11366] AH01276: Cannot serve directory /var/www/fabiodirauso.it/images/forArt/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm) found, and server-generated directory index forbidden by Options directive, referer: https://www.fabiodirauso.it/GreenEnergy/Riscaldamento_alternativo/pompe_di_calore&dp&
...
show less
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2025-12-23 10:07:48
(8 months ago)
108.162.226.67 - - [23/Dec/2025:12:07:45 +0200] "GET /wp-includes/assets/ HTTP/1.1" 404 280 "-" "Moz ...
show more
108.162.226.67 - - [23/Dec/2025:12:07:45 +0200] "GET /wp-includes/assets/ HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0"
108.162.226.67 - - [23/Dec/2025:12:07:48 +0200] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
...
show less
Web App Attack
🇨🇳
ThreatBook.io
2025-11-06 22:34:40
(10 months ago)
2025-11-06 11:52:51 /bless.php
Web App Attack
🇩🇪
ps-center
2025-09-08 17:38:51
(1 year ago)
SS1: Web Attack GET /wp-admin/user/admin.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
