πΊπΈ
TPI-Abuse
2026-10-14 23:31:51
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.248.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.248.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:31:48.777052 2026] [security2:error] [pid 9086:tid 9086] [client 172.70.248.156:12158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zemincollection.chevronparkett.com"] [uri "/.git/config"] [unique_id "atAQ5OYFYmNafwI9hFvZPwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§πͺ
madeit
2026-10-01 12:06:35
(2 weeks ago)
Web App Attack
π§πͺ
madeit
2026-09-13 16:05:55
(1 month ago)
Web App Attack
πΊπΈ
craudiovizai
2026-09-04 12:31:30
(1 month ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. ...
show more
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
show less
Web App Attack
Bad Web Bot
π·πΊ
DZBOT
2026-09-01 05:48:23
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
πΊπΈ
jbettigole
2026-08-29 06:22:56
(1 month ago)
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/F ...
show more
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
show less
Brute-Force
Hacking
π§πͺ
madeit
2026-08-20 14:40:31
(1 month ago)
Web App Attack
π³π΄
jad-abuse
2026-08-07 04:34:23
(2 months ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 1 sensor(s); 2 hits.
show less
Brute-Force
Web App Attack
π§πͺ
madeit
2026-08-05 14:44:11
(2 months ago)
Web App Attack
π·πΊ
DZBOT
2026-08-04 03:11:45
(2 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
π¬π§
Axel
2026-07-11 04:37:40
(3 months ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /admin/.env S ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /admin/.env Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
πΊπ¦
URAN Publishing Service
2026-06-21 04:53:17
(3 months ago)
172.70.248.156 - - [21/Jun/2026:07:52:22 +0300] "GET /wp-admin/about/ HTTP/1.1" 404 768 "-" "Mozlila ...
show more
172.70.248.156 - - [21/Jun/2026:07:52:22 +0300] "GET /wp-admin/about/ HTTP/1.1" 404 768 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
172.70.248.156 - - [21/Jun/2026:07:53:17 +0300] "GET /wp-admin/images/ HTTP/1.1" 404 768 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-15 23:16:26
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.248.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.248.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 19:16:20.195909 2026] [security2:error] [pid 13771:tid 13771] [client 172.70.248.156:9287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eydebrothers.com"] [uri "/.git/config"] [unique_id "ajCHxKZ-PhmKMdZ6Q2ExjwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
dynamix
2026-06-13 18:38:20
(4 months ago)
Multiple WAF Violations
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-09 00:04:24
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.248.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.248.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:04:17.653090 2026] [security2:error] [pid 4403:tid 4403] [client 172.70.248.156:9664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.progressivefileshare.org"] [uri "/.env.production"] [unique_id "aidYgd0MEXUMrdPNEZ6ShwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack