Anonymous
2026-06-28 05:50:04
(16 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
mawan
2026-06-25 23:45:52
(2 days ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-23 01:49:25
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 21:49:18.606680 2026] [security2:error] [pid 19953:tid 19953] [client 172.69.150.33:11706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "preskitpc.com"] [uri "/.git/config"] [unique_id "ajnmHnbuARNh-mKD6YFkPwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐บ
DZBOT
2026-06-19 10:57:04
(1 week ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-17 15:18:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 11:18:05.738678 2026] [security2:error] [pid 8486:tid 8486] [client 172.69.150.33:12785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "echinech.utilis.net"] [uri "/.git/config"] [unique_id "ajK6rSoPNCYtgtNku_PUaAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mawan
2026-06-13 19:51:19
(2 weeks ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-06-12 09:04:04
(2 weeks ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
WellSpring
2026-06-08 16:33:17
(2 weeks ago)
wordpress scan on 760.today/wp-admin/install.php โ WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-04 15:58:36
(3 weeks ago)
[ThuJun0417:58:31.8677852026][security2:error][pid3569070:tid3569196][client172.69.150.33:0]ModSecur ...
show more
[ThuJun0417:58:31.8677852026][security2:error][pid3569070:tid3569196][client172.69.150.33:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"respiratrentino.it\"][uri\"/.git/config\"][unique_id\"aiGgp1-Fe9eFzTBCKJcggwAAAQ0\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2026-06-02 18:05:42
(3 weeks ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-14 05:08:01
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 01:07:56.430110 2026] [security2:error] [pid 63886:tid 63886] [client 172.69.150.33:13981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pfmarch.com"] [uri "/.git/config"] [unique_id "ad3LrC9LGiE2WeyMN_r1DwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-13 19:50:38
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 15:50:32.648589 2026] [security2:error] [pid 915039:tid 915133] [client 172.69.150.33:12972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.moderncabinetcorp.com"] [uri "/.git/config"] [unique_id "ad1JCC9PtNwlXw8iXSW1dQAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-04-08 16:55:05
(2 months ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 19:52:39
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 15:52:33.734629 2026] [security2:error] [pid 1442500:tid 1442500] [client 172.69.150.33:11625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.alanmariotti.com"] [uri "/.git/HEAD"] [unique_id "adVggXrm1nCGjJdrv1S06AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 03:57:38
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.150.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 23:57:31.240473 2026] [security2:error] [pid 942961:tid 942961] [client 172.69.150.33:10671] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.frelsburg.com"] [uri "/.git/logs/HEAD"] [unique_id "adSAq1nGo5DtZQYOl5ao0AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack