๐ต๐ฑ
IROK
2026-03-19 13:38:50
(6 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
๐ซ๐ท
masterguru
2026-03-19 08:46:27
(6 months ago)
Blocked Cloudflare Worker request. Pattern match "." at REQUEST_HEADERS:cf-worker. (5025-193)
Hacking
๐บ๐ธ
TPI-Abuse
2026-03-19 07:49:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.240.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.240.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 03:49:37.392387 2026] [security2:error] [pid 31900:tid 31900] [client 172.70.240.167:12023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.networkmediasoftware.com"] [uri "/.git/refs/heads/main"] [unique_id "abuqkRy0wamA-21Qb1tWvgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
aranguren.org
2026-03-19 04:19:27
(6 months ago)
172.70.240.167 - - [19/Mar/2026:15:19:26 +1100] "GET /.env.json HTTP/2.0" 404 995 "-" "-"
172.70.240 ...
show more
172.70.240.167 - - [19/Mar/2026:15:19:26 +1100] "GET /.env.json HTTP/2.0" 404 995 "-" "-"
172.70.240.167 - - [19/Mar/2026:15:19:26 +1100] "GET /config/env HTTP/2.0" 404 995 "-" "-"
172.70.240.167 - - [19/Mar/2026:15:19:26 +1100] "GET /.env_backup HTTP/2.0" 404 995 "-" "-"
172.70.240.167 - - [19/Mar/2026:15:19:26 +1100] "GET /config/.env.local HTTP/2.0" 404 995 "-" "-"
172.70.240.167 - - [19/Mar/2026:15:19:26 +1100] "GET /.env1 HTTP/2.0" 404 995 "-" "-"
172.70.240.167 - - [19/Mar/2026:15:19:26 +1100] "GET /.env.dist HTTP/2.0" 404 995 "-" "-"
...
show less
Bad Web Bot
๐บ๐ธ
mnsf
2026-03-18 17:06:22
(6 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-18 14:33:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.240.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.240.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 10:33:40.945249 2026] [security2:error] [pid 29057:tid 29081] [client 172.70.240.167:11926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pizzadlux.com"] [uri "/home/.env"] [unique_id "abq3xAc2g2LWt5buCKJ1LwAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-18 13:16:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.240.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.240.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 09:16:11.426152 2026] [security2:error] [pid 27837:tid 27837] [client 172.70.240.167:10955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.personalizedfavorboxes.com"] [uri "/.env.local.backup"] [unique_id "abqlm4pZ9AJZk7yBjJotTAAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-03-17 23:02:03
(6 months ago)
Auto-ban: >3000 req/min op 2026-03-17
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-03-17 05:03:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.240.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.240.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 01:03:01.738571 2026] [security2:error] [pid 23853:tid 23853] [client 172.70.240.167:13043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shopauto.cbmanufacturing.com"] [uri "/.git/config"] [unique_id "abjghaYYSQtEgMaEeNedjwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Mendip_Defender
2026-02-13 07:47:30
(7 months ago)
[2026-02-13 05:57:52.340] 1118927:698ebd6052fd2 ERR [panel] [Action Log] Failed login attempt with l ...
show more
[2026-02-13 05:57:52.340] 1118927:698ebd6052fd2 ERR [panel] [Action Log] Failed login attempt with login 'admin' from IP 172.70.240.167
[2026-02-13 07:47:26.036] 1148379:698ed70e08ba4 ERR [panel] [Action Log] Failed login attempt with login 'admin' from IP 172.70.240.167
...
show less
Brute-Force
๐บ๐ฆ
URAN Publishing Service
2026-02-12 11:41:15
(7 months ago)
172.70.240.167 - - [12/Feb/2026:13:41:13 +0200] "GET /wp-admin/network/index.php HTTP/1.1" 404 330 " ...
show more
172.70.240.167 - - [12/Feb/2026:13:41:13 +0200] "GET /wp-admin/network/index.php HTTP/1.1" 404 330 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
172.70.240.167 - - [12/Feb/2026:13:41:14 +0200] "GET /wp-includes/ID3/index.php HTTP/1.1" 404 329 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
...
show less
Web App Attack
๐ฉ๐ช
FBI_CyberUnit
2026-01-18 00:54:16
(8 months ago)
Unauthorized SSH access attempts
Brute-Force
SSH
Anonymous
2025-12-27 16:29:33
(8 months ago)
[Sat Dec 27 17:29:30.986751 2025] [authz_core:error] [pid 11340] [client 172.70.240.167:10822] AH016 ...
show more
[Sat Dec 27 17:29:30.986751 2025] [authz_core:error] [pid 11340] [client 172.70.240.167:10822] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Dec 27 17:29:32.059367 2025] [authz_core:error] [pid 11340] [client 172.70.240.167:10822] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Dec 27 17:29:32.319127 2025] [authz_core:error] [pid 11340] [client 172.70.240.167:10822] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2025-12-24 11:26:26
(8 months ago)
172.70.240.167 - - [24/Dec/2025:13:26:25 +0200] "GET /wp-admin/includes/ HTTP/1.1" 404 196 "-" "-"
1 ...
show more
172.70.240.167 - - [24/Dec/2025:13:26:25 +0200] "GET /wp-admin/includes/ HTTP/1.1" 404 196 "-" "-"
172.70.240.167 - - [24/Dec/2025:13:26:26 +0200] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 404 196 "-" "-"
...
show less
Web App Attack
๐จ๐ฟ
0x44
2025-12-09 19:12:09
(9 months ago)
172.70.240.167 [08/Dec/2025 * Spam host detected, probing for vulnerabilities]
Web Spam
Exploited Host
Web App Attack