๐บ๐ธ
WellSpring
2026-05-21 21:27:01
(2 months ago)
wordpress scan on 989.today/wp-admin/install.php โ WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-05-06 21:33:38
(2 months ago)
[WedMay0623:33:35.4068822026][security2:error][pid1341705:tid1341981][client172.70.251.161:0]ModSecu ...
show more
[WedMay0623:33:35.4068822026][security2:error][pid1341705:tid1341981][client172.70.251.161:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"4-server.com\"][uri\"/.env.dev\"][unique_id\"afuzrxrobVt0wWbOchQfOAAAAQg\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-30 07:44:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 03:44:00.905066 2026] [security2:error] [pid 30326:tid 30326] [client 172.70.251.161:9802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tekrav.com"] [uri "/.git/config"] [unique_id "afMIQGyCNX-FlCIQFz5qCQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Sรฉfora Srl
2026-04-28 05:02:08
(3 months ago)
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ...
show more
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-04-23 08:17:55
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 04:17:50.950543 2026] [security2:error] [pid 21345:tid 21345] [client 172.70.251.161:10886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayinsights.com"] [uri "/.git/config"] [unique_id "aenVrj4JO1qQuxyB8_ZZkgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
gonet.home
2026-04-19 00:55:18
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=1
Brute-Force
๐ฎ๐ฉ
gonet.home
2026-04-17 00:55:17
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=1
Brute-Force
๐ฎ๐ฉ
gonet.home
2026-04-15 00:55:10
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=1
Brute-Force
๐ฎ๐ฉ
gonet.home
2026-04-14 00:55:09
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=1
Brute-Force
๐ฎ๐ฉ
gonet.home
2026-04-13 00:50:29
(3 months ago)
Security Event Detected by SOC Gonet: event=alert, hits=1
Brute-Force
๐ซ๐ท
Thaliruth
2026-04-07 13:15:33
(3 months ago)
172.70.251.161 - - [07/Apr/2026:15:15:31 +0200] "GET /.git/index HTTP/1.0" 403 4509 "-" "-"
172.70.2 ...
show more
172.70.251.161 - - [07/Apr/2026:15:15:31 +0200] "GET /.git/index HTTP/1.0" 403 4509 "-" "-"
172.70.251.161 - - [07/Apr/2026:15:15:31 +0200] "GET /.git/refs/heads/main HTTP/1.0" 403 4509 "-" "-"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 11:15:42
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 07:15:37.799018 2026] [security2:error] [pid 1025467:tid 1025467] [client 172.70.251.161:11041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.haroparke.com"] [uri "/.env.development"] [unique_id "adTnWTruxIlXo2X6e2wa_gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-06 01:21:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:21:49.256142 2026] [security2:error] [pid 25205:tid 25205] [client 172.70.251.161:9763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.agreyhawkcampaign.net"] [uri "/.git/refs/heads/master"] [unique_id "adMKrScBdAdS9YXeEhQhVAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-04 23:59:37
(3 months ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 05:26:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.251.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:26:52.985699 2026] [security2:error] [pid 21030:tid 21030] [client 172.70.251.161:13988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cubicearth.com"] [uri "/.git/index"] [unique_id "adChHFVN2X_3DPXnoRSrgwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack