๐ซ๐ฎ
iamxorum
2026-10-15 21:52:41
(3 hours ago)
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-10-15T21:52:40.43 ...
show more
Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-10-15T21:52:40.437364+00:00 XRM-00 kernel: [1571127.233843] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=172.69.70.7 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=47934 DF PROTO=TCP SPT=10852 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
๐ง๐ช
madeit
2026-10-14 21:28:17
(1 day ago)
Web App Attack
๐ง๐ช
madeit
2026-09-29 16:43:59
(2 weeks ago)
Web App Attack
Anonymous
2026-09-26 19:45:33
(2 weeks ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
๐ง๐ช
madeit
2026-09-11 14:09:43
(1 month ago)
Web App Attack
๐ง๐ช
madeit
2026-08-31 22:43:12
(1 month ago)
Web App Attack
๐ง๐ช
madeit
2026-08-11 07:43:56
(2 months ago)
Web App Attack
๐บ๐ธ
micropedro
2026-08-04 08:27:14
(2 months ago)
5 incidents: web scanning/attack. First: 2026-08-04 04:27, Last: 2026-08-04 04:27 UTC. Triggers: fir ...
show more
5 incidents: web scanning/attack. First: 2026-08-04 04:27, Last: 2026-08-04 04:27 UTC. Triggers: firewall-http.
show less
Port Scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-29 16:44:34
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.70.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.70.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 12:44:10.305872 2026] [security2:error] [pid 34326:tid 34326] [client 172.69.70.7:12848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billhumphreyresearch.com"] [uri "/.env.backup"] [unique_id "amot2iyfSvGFcBIKiDN4ngAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 02:57:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.70.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.70.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 22:57:26.068340 2026] [security2:error] [pid 7204:tid 7204] [client 172.69.70.7:10212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.connectigramme.com.linguistes.com"] [uri "/.env"] [unique_id "ajdTFrOAo6zhSMyta2QoqAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-19 07:29:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.70.7 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.70.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 03:29:10.528860 2026] [security2:error] [pid 25142:tid 25142] [client 172.69.70.7:12908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artsun.art"] [uri "/.git/config"] [unique_id "ajTvxiy7zQW-njJRB6YdnQAAAA4"], referer: https://www.google.com/search?q=artsun.art
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-17 22:00:23
(3 months ago)
Auto-ban: >3000 req/min op 2026-06-17
Web App Attack
SSH
Hacking
๐บ๐ธ
mnsf
2026-03-25 23:05:45
(6 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
๐บ๐ธ
chrisj
2026-03-20 10:24:13
(6 months ago)
[Fri Mar 20 10:24:01.467072 2026] [proxy_fcgi:error] [pid 1512997:tid 1512997] [client 172.69.70.7:1 ...
show more
[Fri Mar 20 10:24:01.467072 2026] [proxy_fcgi:error] [pid 1512997:tid 1512997] [client 172.69.70.7:11092] AH01071: Got error 'Primary script unknown', referer: http://monte.sistemas.biz/system_core.php
[Fri Mar 20 10:24:12.827643 2026] [proxy_fcgi:error] [pid 1511780:tid 1511780] [client 172.69.70.7:11815] AH01071: Got error 'Primary script unknown', referer: http://monte.sistemas.biz/item.php
[Fri Mar 20 10:24:13.335559 2026] [proxy_fcgi:error] [pid 1511780:tid 1511780] [client 172.69.70.7:11815] AH01071: Got error 'Primary script unknown', referer: http://monte.sistemas.biz/3PJcpMFsD8B.php
...
show less
Brute-Force
๐บ๐ธ
myagent.site
2026-03-19 13:45:57
(6 months ago)
Blocking for trying to access an exploit file: /server/.env
Hacking