🇺🇸
TPI-Abuse
2026-06-26 10:33:49
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.203.253.217 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.253.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 06:33:43.393702 2026] [security2:error] [pid 1578:tid 1578] [client 172.203.253.217:47635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.26"] [uri "/.git/HEAD"] [unique_id "aj5Vh7vqxq28eEqFJH9DnwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇭
Sawasdee
2026-06-26 10:27:07
(6 days ago)
Unwanted checking 80 or 443 port
...
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-26 09:32:37
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.203.253.217 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.253.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 05:32:32.565058 2026] [security2:error] [pid 5646:tid 5646] [client 172.203.253.217:47316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.221"] [uri "/.git/HEAD"] [unique_id "aj5HMD_3ZHrAP34hGBtqewAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 09:04:11
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.203.253.217 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.253.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 05:04:04.426982 2026] [security2:error] [pid 27566:tid 27566] [client 172.203.253.217:47588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.54"] [uri "/.git/HEAD"] [unique_id "aj5AhN2EOkEZXwoabeR6mAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-26 08:17:15
(6 days ago)
Web vulnerability probing: /.git/logs/HEAD
Web App Attack
🇺🇸
RAP
2026-06-26 08:09:30
(6 days ago)
2026-06-26 08:09:30 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan
Web App Attack
2026-06-26 05:52:09
(1 week ago)
apache vulnerability scan
Web App Attack
🇧🇬
Stoyko Stoykov
2026-06-26 04:46:32
(1 week ago)
172.203.253.217 - - [26/Jun/2026:07:46:31 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 ...
show more
172.203.253.217 - - [26/Jun/2026:07:46:31 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
...
show less
Hacking
Web App Attack
🇯🇵
jay hung
2026-06-12 09:37:38
(2 weeks ago)
2026-06-12T09:37:37.746917+00:00 quarktech kernel: [1091900.687552] [UFW BLOCK] IN=eth0 OUT= MAC=22: ...
show more
2026-06-12T09:37:37.746917+00:00 quarktech kernel: [1091900.687552] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=172.203.253.217 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x00 TTL=101 ID=1 DF PROTO=TCP SPT=10283 DPT=443 WINDOW=0 RES=0x00 ACK RST URGP=0
...
show less
Port Scan
🇺🇸
Mark--
2026-06-11 11:18:01
(3 weeks ago)
Unauthorized connection attempt detected port 8080
Hacking
🇩🇪
EGP Abuse Dept
2026-06-11 01:13:58
(3 weeks ago)
Scanning for web/db/file exploits on tpc-010.mach3builders.nl
SQL Injection
Bad Web Bot
Web App Attack
🇷🇸
Scan
2026-06-11 00:21:18
(3 weeks ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇹🇷
Threat.live
2026-06-10 23:35:02
(3 weeks ago)
Suspicious Connection Attempts
Brute-Force
🇩🇪
banankicks
2026-06-10 23:10:53
(3 weeks ago)
Unauthorized connection attempt detected from IP address 172.203.253.217 to port 8080 (banankicks-se ...
show more
Unauthorized connection attempt detected from IP address 172.203.253.217 to port 8080 (banankicks-server) [X]
show less
Brute-Force
Exploited Host
🇺🇸
RAP
2026-06-10 22:44:30
(3 weeks ago)
2026-06-10 22:44:30 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan
Web App Attack