๐บ๐ธ
Rayulcifer
2025-12-31 02:37:29
(9 months ago)
167.99.73.138 - - [30/Dec/2025:21:36:52 -0500] "CONNECT request.countbot.win:443:443 HTTP/1.1" 400 3 ...
show more
167.99.73.138 - - [30/Dec/2025:21:36:52 -0500] "CONNECT request.countbot.win:443:443 HTTP/1.1" 400 392 "-" "-"
167.99.73.138 - - [30/Dec/2025:21:37:28 -0500] "CONNECT request.countbot.win:443:443 HTTP/1.1" 400 392 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
๐บ๐ธ
Rayulcifer
2025-12-29 14:16:45
(9 months ago)
167.99.73.138 - - [29/Dec/2025:09:16:44 -0500] "CONNECT dstat.countbot.uk:443 HTTP/1.1" 502 488 "-" ...
show more
167.99.73.138 - - [29/Dec/2025:09:16:44 -0500] "CONNECT dstat.countbot.uk:443 HTTP/1.1" 502 488 "-" "-"
167.99.73.138 - - [29/Dec/2025:09:16:45 -0500] "\x16\x03\x01" 400 392 "-" "-"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
๐ธ๐ช
teskedsgumman.se
2025-11-19 05:55:00
(10 months ago)
Requests of strange files
Hacking
๐บ๐ธ
Starburst SysOp Team
2025-11-18 10:20:36
(10 months ago)
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 138.73.99.167.rbl.malwa ...
show more
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 138.73.99.167.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3)
show less
Hacking
Anonymous
2025-11-18 10:04:46
(10 months ago)
Web App Attack
๐ซ๐ท
uhlhosting
2025-11-18 08:39:02
(10 months ago)
www.staging.atec-bb.ch 167.99.73.138 - - [18/Nov/2025:09:38:59.367410 +0100] "HEAD / HTTP/1.1" 403 0 ...
show more
www.staging.atec-bb.ch 167.99.73.138 - - [18/Nov/2025:09:38:59.367410 +0100] "HEAD / HTTP/1.1" 403 0 "-" "-" aRwwo7EkQenLJcXYQ3-DmgAAAEU "-" /apache/20251118/20251118-0938/20251118-093859-aRwwo7EkQenLJcXYQ3-DmgAAAEU 0 1208 md5:29ac0750a7e99f8f01f096741b074f77
www.staging.atec-bb.ch 167.99.73.138 - - [18/Nov/2025:09:38:59.625678 +0100] "GET / HTTP/1.1" 403 199 "-" "-" aRwwo7EkQenLJcXYQ3-DmwAAAE8 "-" /apache/20251118/20251118-0938/20251118-093859-aRwwo7EkQenLJcXYQ3-DmwAAAE8 0 1227 md5:4c29467ded61bb85a767b8c8e6d01ff3
www.staging.atec-bb.ch 167.99.73.138 - - [18/Nov/2025:09:38:59.893776 +0100] "GET /.env HTTP/1.1" 403 199 "-" "-" aRwwo7EkQenLJcXYQ3-DnAAAAFM "-" /apache/20251118/20251118-0938/20251118-093859-aRwwo7EkQenLJcXYQ3-DnAAAAFM 0 1073 md5:9fc0fa507b79620ce69d9f295e72d1de
www.staging.atec-bb.ch 167.99.73.138 - - [18/Nov/2025:09:39:00.155596 +0100] "GET / HTTP/1.1" 403 199 "-" "-" aRwwpLEkQenLJcXYQ3-DnQAAAEk "-" /apache/20251118/20251118-0939/20251118-093900-aRwwpLEkQenLJcXYQ3-DnQ
...
show less
DDoS Attack
Brute-Force
๐ฌ๐ง
Swiptly
2025-11-18 08:26:25
(10 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
๐ณ๐ฑ
Site.eu
2025-11-18 07:57:31
(10 months ago)
Excessive multi-domain requests
Brute-Force
๐ฒ๐พ
Rizzy
2025-11-18 06:59:08
(10 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
thefoofighter
2025-11-18 06:49:26
(10 months ago)
[Tue Nov 18 06:49:26.027540 2025] [:error] [pid 3766274] [client 167.99.73.138:42132] [client 167.99 ...
show more
[Tue Nov 18 06:49:26.027540 2025] [:error] [pid 3766274] [client 167.99.73.138:42132] [client 167.99.73.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.squixl.com"] [uri "/.env"] [unique_id "aRwW9q-vAce58Vg6E90DNwAAAAk"]
[Tue Nov 18 06:49:26.554590 2025] [:error] [pid 3766274] [client 167.99.73.138:42132] [client 167.99.73.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"]
...
show less
Bad Web Bot
Web App Attack
๐ท๐บ
Reaper
2025-11-18 06:34:08
(10 months ago)
POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Web App Attack
๐บ๐ธ
octageeks.com
2025-11-18 05:06:02
(10 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
Anonymous
2025-11-18 02:02:25
(10 months ago)
DirectAdmin Auto Report (modsec_audit.log)
Brute-Force
SSH
๐ฉ๐ช
Live Home Cams
2025-11-17 20:36:26
(10 months ago)
WebApp brute force attack detected. Multiple file scanning attempts from 167.99.73.138. Detected by ...
show more
WebApp brute force attack detected. Multiple file scanning attempts from 167.99.73.138. Detected by fail2ban.
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
i-turnradio.nl
2025-11-17 20:25:21
(10 months ago)
2025-11-17 @ 21:25:21 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack