๐ง๐ฌ
Stoyko Stoykov
2026-06-07 09:11:59
(5 hours ago)
162.158.95.157 - - [07/Jun/2026:12:11:58 +0300] "GET /ini.php HTTP/1.1" 301 162 "-" "-"
...
Hacking
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-07 07:30:27
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐ฉ๐ช
Blexyel
2026-06-06 22:18:06
(15 hours ago)
162.158.95.157 - - [07/Jun/2026:00:18:05 +0200] "GET /.git/config HTTP/1.1" 404 577 "-" "Mozilla/5.0 ...
show more
162.158.95.157 - - [07/Jun/2026:00:18:05 +0200] "GET /.git/config HTTP/1.1" 404 577 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 Version/17.0 Mobile Safari/604.1"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 04:17:04
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 00:17:00.156835 2026] [security2:error] [pid 7859:tid 7859] [client 162.158.95.157:11990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.studiopilates.net"] [uri "/.git/config"] [unique_id "aiD8PMSAr1Xp673h1MhPNAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-06-02 21:45:15
(4 days ago)
162.158.95.157 - - [03/Jun/2026:00:45:12 +0300] "GET /portal/phpinfo.php HTTP/2.0" 404 0 "http://bit ...
show more
162.158.95.157 - - [03/Jun/2026:00:45:12 +0300] "GET /portal/phpinfo.php HTTP/2.0" 404 0 "http://bitwarden.it-systems.org/portal/phpinfo.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 21:40:12
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 17:40:07.889261 2026] [security2:error] [pid 6058:tid 6077] [client 162.158.95.157:11869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sallykimmel.com"] [uri "/.git/config"] [unique_id "ah9NtzEy-IrWiNYTms1_TAAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 13:14:56
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 09:14:52.179571 2026] [security2:error] [pid 18269:tid 18384] [client 162.158.95.157:11621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idwic.com"] [uri "/.git/config"] [unique_id "ah7XTISUtesdAd-7nWVWkwAAAYw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 11:14:57
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 07:14:49.580026 2026] [security2:error] [pid 16888:tid 16888] [client 162.158.95.157:10681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drstiso.com"] [uri "/.git/config"] [unique_id "ah67KRWS1ev-dZqBQtCJ2gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 07:02:42
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.95.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 03:02:36.673376 2026] [security2:error] [pid 22257:tid 22257] [client 162.158.95.157:9291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10mostwantedfugitives.com"] [uri "/.git/config"] [unique_id "ah6ADOnS9M2ZnxVZxBGMxgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-02 03:05:47
(5 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐ซ๐ท
omartin
2026-05-31 09:47:42
(1 week ago)
Critical Vulnerability Scan detected
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
mnsf
2026-05-30 08:05:48
(1 week ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-05-26 09:43:36
(1 week ago)
162.158.95.157 - - [26/May/2026:12:43:36 +0300] "GET //cms/wp-includes/wlwmanifest.xml HTTP/2.0" 404 ...
show more
162.158.95.157 - - [26/May/2026:12:43:36 +0300] "GET //cms/wp-includes/wlwmanifest.xml HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Hacking
Web App Attack
๐จ๐ฆ
dispensight
2026-05-19 14:14:48
(2 weeks ago)
ngrok traffic to secureleaf-fraud-api-v1.ngrok.io: 1 req(s) [GET:1] URIs: /. UA-class: WordPress. UA ...
show more
ngrok traffic to secureleaf-fraud-api-v1.ngrok.io: 1 req(s) [GET:1] URIs: /. UA-class: WordPress. UA: http://dispensight.help/wp-admin/install.php?step=1. Geo: Germany / Cloudflare, Inc.. Flags: proxy, threats:bot. Window: 2026-05-19T07:14:48-07:00 to 2026-05-19T07:14:48-07:00.
show less
Hacking
Bad Web Bot
๐ซ๐ท
omartin
2026-05-18 19:54:54
(2 weeks ago)
Critical Vulnerability Scan detected
Hacking
Brute-Force
Exploited Host
Web App Attack