Anonymous
2026-04-19 06:03:51
(5 months ago)
Failed Wordpress Logins
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 20:36:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 16:36:17.084510 2026] [security2:error] [pid 3145596:tid 3145596] [client 172.69.151.133:10513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ssion.com"] [uri "/.git/logs/HEAD"] [unique_id "ada8QdRezHbPTmalOG3i4gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-04-06 02:05:55
(6 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 21:20:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 17:20:20.627463 2026] [security2:error] [pid 28107:tid 28107] [client 172.69.151.133:9395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smog-test-coupons.smogsandiego.com"] [uri "/.env.bak"] [unique_id "adLSFLnXrsBxQWgwVuZovQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-05 05:34:49
(6 months ago)
Aggressive web scan
Web App Attack
๐จ๐ญ
YF
2026-04-04 19:05:05
(6 months ago)
Attempted access to sensitive files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 08:56:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 04:55:58.521990 2026] [security2:error] [pid 11509:tid 11509] [client 172.69.151.133:10984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.foamnoodlejousting.com"] [uri "/.git/index"] [unique_id "adDSHg0OKuWepwP-c2KryAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 08:30:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 04:29:57.193102 2026] [security2:error] [pid 13688:tid 13688] [client 172.69.151.133:10739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "km-herbs.com.my-spec.com"] [uri "/.env.production"] [unique_id "adDMBYVgM_-q-nWEJ4aingAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hary74656
2026-04-04 01:58:04
(6 months ago)
[Sat Apr 04 03:57:39.548570 2026] [security2:error] [pid 2399:tid 2710] [remote 172.69.151.133:9884] ...
show more
[Sat Apr 04 03:57:39.548570 2026] [security2:error] [pid 2399:tid 2710] [remote 172.69.151.133:9884] [client 172.69.151.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "Search Engine" at TX:httpbl_msg. [file "/usr/share/modsecurity-crs/rules/REQUEST-910-IP-REPUTATION.conf"] [line "199"] [id "910150"] [msg "HTTP Blacklist match for search engine IP"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-ip"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [hostname "www.weavernet.at"] [uri "/.env.local"] [unique_id "adBwE5rpLyT0BdXLv45E9QADjwo"]
[Sat Apr 04 03:57:39.548588 2026] [security2:error] [pid 2398:tid 2517] [remote 172.69.151.133:9885] [client 172.69.151.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "Search Engine" at TX:httpbl_msg. [file "/usr/share/modsecurity-crs/rules/REQUEST-910-IP-REPUTATION.conf"] [line "199"] [id "910150"] [msg "HTTP Blackli
...
show less
Web App Attack
๐ช๐ธ
masterguru
2026-04-03 14:26:48
(6 months ago)
Restricted File Access Attempt. Matched phrase "/.env" at REQUEST_FILENAME. (930130-122)
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-04-03 11:46:26
(6 months ago)
Blocked Cloudflare Worker request. Pattern match "." at REQUEST_HEADERS:Cf-Worker. (5025-197)
Hacking
๐บ๐ธ
mnsf
2026-04-03 11:05:41
(6 months ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-03 09:02:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 05:02:18.878314 2026] [security2:error] [pid 7059:tid 7059] [client 172.69.151.133:9230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iceofparadise.com"] [uri "/.git/HEAD"] [unique_id "ac-CGqAltkSdTeEn78_v8gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
F242
2026-04-03 08:41:36
(6 months ago)
Wordpress soft lock
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-01 23:14:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.151.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 19:14:47.224362 2026] [security2:error] [pid 15852:tid 15852] [client 172.69.151.133:11352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.termstech.com"] [uri "/.git/refs/heads/main"] [unique_id "ac2m5zV5hBMdfo6YyEwlJAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack