๐ง๐ช
madeit
2026-08-21 11:12:57
(2 weeks ago)
Web App Attack
๐ฉ๐ช
www.mammazone.it
2026-08-19 01:38:39
(2 weeks ago)
[Wed Aug 19 03:38:39.064854 2026] [proxy_fcgi:error] [pid 4163478] [client 162.158.172.123:13106] AH ...
show more
[Wed Aug 19 03:38:39.064854 2026] [proxy_fcgi:error] [pid 4163478] [client 162.158.172.123:13106] AH01071: Got error 'Primary script unknown'
[Wed Aug 19 03:38:39.210248 2026] [proxy_fcgi:error] [pid 4163478] [client 162.158.172.123:13106] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
๐ฉ๐ช
www.mammazone.it
2026-08-16 14:27:28
(2 weeks ago)
[Sun Aug 16 16:27:27.950054 2026] [proxy_fcgi:error] [pid 3425155] [client 162.158.172.123:11725] AH ...
show more
[Sun Aug 16 16:27:27.950054 2026] [proxy_fcgi:error] [pid 3425155] [client 162.158.172.123:11725] AH01071: Got error 'Primary script unknown'
[Sun Aug 16 16:27:27.968142 2026] [proxy_fcgi:error] [pid 3425155] [client 162.158.172.123:11725] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
๐ฉ๐ช
www.mammazone.it
2026-08-08 05:42:24
(4 weeks ago)
[Sat Aug 08 07:42:23.554834 2026] [proxy_fcgi:error] [pid 1452790] [client 162.158.172.123:13589] AH ...
show more
[Sat Aug 08 07:42:23.554834 2026] [proxy_fcgi:error] [pid 1452790] [client 162.158.172.123:13589] AH01071: Got error 'Primary script unknown'
[Sat Aug 08 07:42:23.705652 2026] [proxy_fcgi:error] [pid 1452790] [client 162.158.172.123:13589] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
๐ท๐บ
DZBOT
2026-05-29 11:00:57
(3 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
WellSpring
2026-05-27 15:08:12
(3 months ago)
wordpress scan on 515.today/wp-admin/install.php โ WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot
Web App Attack
๐ง๐พ
lns.bz
2026-04-16 21:23:16
(4 months ago)
Too many 404 requests [BY]
Web App Attack
๐ฌ๐ง
OptimusGO
2026-03-14 20:54:57
(5 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-03-14 20:54:57 UTC
Log evidence:
162.158.172.123 - - [14/Mar/2026:20:51:33 +0000] "GET /app_dev.php/_profiler/phpinfo HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2pre) Gecko/20070118 Firefox/2.0.0.2pre"
162.158.172.123 - - [14/Mar/2026:20:51:36 +0000] "GET /backend/.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.9) Gecko/20071103 Firefox/2.0.0.9"
162.158.172.123 - - [14/Mar/2026:20:51:39 +0000] "GET /core/.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; de-DE; rv:1.7.6) Gecko/20050226 Firefox/1.0.1"
show less
Port Scan
Brute-Force
๐ฉ๐ช
Blexyel
2026-03-01 11:54:02
(6 months ago)
162.158.172.123 - - [01/Mar/2026:12:54:01 +0100] "GET /.git/config HTTP/2.0" 400 313 "-" "fasthttp" ...
show more
162.158.172.123 - - [01/Mar/2026:12:54:01 +0100] "GET /.git/config HTTP/2.0" 400 313 "-" "fasthttp" "s3.fomx.gay"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
thefoofighter
2026-01-05 07:57:39
(8 months ago)
[Mon Jan 05 07:57:33.119922 2026] [:error] [pid 1528411] [client 162.158.172.123:12760] [client 162. ...
show more
[Mon Jan 05 07:57:33.119922 2026] [:error] [pid 1528411] [client 162.158.172.123:12760] [client 162.158.172.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sarahmcnally.com"] [uri "/.env.save.1"] [unique_id "aVtu7cM3_WTKiYaefYvMogAAABM"]
[Mon Jan 05 07:57:39.365555 2026] [:error] [pid 1528455] [client 162.158.172.123:14329] [client 162.158.172.123] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [v
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Campus France
2025-11-24 13:45:12
(9 months ago)
162.158.172.123 - - [24/Nov/2025:14:45:06 +0100] "POST /wp-login.php HTTP/1.1" 301 695 "https://gaye ...
show more
162.158.172.123 - - [24/Nov/2025:14:45:06 +0100] "POST /wp-login.php HTTP/1.1" 301 695 "https://gayergaltongasts.cloud/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
162.158.172.123 - - [24/Nov/2025:14:45:07 +0100] "POST /wp-login.php HTTP/1.1" 301 695 "https://gayergaltongasts.cloud/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
162.158.172.123 - - [24/Nov/2025:14:45:09 +0100] "POST /wp-login.php HTTP/1.1" 301 695 "https://gayergaltongasts.cloud/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
162.158.172.123 - - [24/Nov/2025:14:45:10 +0100] "POST /wp-login.php HTTP/1.1" 301 695 "https://gayergaltongasts.cloud/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
162.158.172.123 - - [24/No
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
mawan
2025-11-19 10:31:45
(9 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ต๐ฑ
Niko's Stuff
2025-09-18 07:26:59
(11 months ago)
[1x] Triggered application-multi,language-multi platform-multi,attack-generic | Score: 5 | Msg: Inbo ...
show more
[1x] Triggered application-multi,language-multi platform-multi,attack-generic | Score: 5 | Msg: Inbound Anomaly Score Exceeded (Total Score: 5) | Uri: /.env.local | Client: 162.158.172.123 162.158.172.123 | Hostname: nikostuff.com | Blocked web application firewall detected attack
show less
Brute-Force
Anonymous
2025-08-05 18:12:23
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-07-19 01:56:48
(1 year ago)
2025-07-18 22:53:55,425 fail2ban.actions [841]: NOTICE [nginx-bad-request] Ban 162.158.172.1 ...
show more
2025-07-18 22:53:55,425 fail2ban.actions [841]: NOTICE [nginx-bad-request] Ban 162.158.172.123
2025-07-19 03:56:47,233 fail2ban.actions [841]: NOTICE [nginx-bad-request] Ban 162.158.172.123
...
show less
Port Scan
Brute-Force
Bad Web Bot