๐ท๐บ
DZBOT
2026-07-23 09:37:27
(14 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-27 18:55:27
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.102.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.102.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 14:55:23.906519 2026] [security2:error] [pid 31808:tid 31808] [client 172.71.102.82:12481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eydebrothers.com"] [uri "/.git/config"] [unique_id "akAcmyia6utJPGavs7pl7wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐บ
DZBOT
2026-06-12 16:49:43
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-05-29 22:07:56
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-28.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
ParaBug
2026-05-14 03:14:10
(2 months ago)
172.71.102.82 - - [14/May/2026:05:14:10 +0200] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 563 " ...
show more
172.71.102.82 - - [14/May/2026:05:14:10 +0200] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 563 "-" "http://myviven.org/wp-admin/install.php?step=1"
...
show less
Phishing
Brute-Force
Web App Attack
Anonymous
2026-05-10 08:56:34
(2 months ago)
172.71.102.82 - - [10/May/2026:10:56:33 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.0" 404 ...
show more
172.71.102.82 - - [10/May/2026:10:56:33 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [10/May/2026:10:56:33 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [10/May/2026:10:56:33 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [10/May/2026:10:56:33 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [10/May/2026:10:56:34 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/
...
show less
Brute-Force
Web App Attack
Anonymous
2026-05-07 02:18:16
(2 months ago)
172.71.102.82 - - [07/May/2026:04:18:16 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.0" 404 ...
show more
172.71.102.82 - - [07/May/2026:04:18:16 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [07/May/2026:04:18:16 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [07/May/2026:04:18:16 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [07/May/2026:04:18:16 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [07/May/2026:04:18:16 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/
...
show less
Brute-Force
Web App Attack
Anonymous
2026-05-02 02:10:57
(2 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-04-25 09:38:35
(2 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-04-04 23:46:21
(3 months ago)
172.71.102.82 - - [05/Apr/2026:01:46:20 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.0" 404 4 ...
show more
172.71.102.82 - - [05/Apr/2026:01:46:20 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [05/Apr/2026:01:46:20 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [05/Apr/2026:01:46:20 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [05/Apr/2026:01:46:20 +0200] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.71.102.82 - - [05/Apr/2026:01:46:20 +0200] "GET //2018/wp-includes/wlwmanifest.xml HTTP/1.0"
...
show less
Brute-Force
Web App Attack
๐จ๐ฆ
yukon.ca
2026-03-28 11:10:24
(3 months ago)
Web Server Enforcement Violation: Sensitive Configuration File Disclosure
Port:80
Hacking
Exploited Host
Anonymous
2026-03-11 03:52:38
(4 months ago)
172.71.102.82 - - [11/Mar/2026:05:52:37 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.0" 404 ...
show more
172.71.102.82 - - [11/Mar/2026:05:52:37 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
172.71.102.82 - - [11/Mar/2026:05:52:37 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
172.71.102.82 - - [11/Mar/2026:05:52:37 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
172.71.102.82 - - [11/Mar/2026:05:52:37 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
172.71.102.82 - - [11/Mar/2026:05:52:37 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.0
...
show less
Brute-Force
Web App Attack
๐ฌ๐ง
no1knows.com
2026-01-19 16:37:35
(6 months ago)
2026/01/19 16:37:25 [error] 3763493#3763493: *107815 FastCGI sent in stderr: "Primary script unknown ...
show more
2026/01/19 16:37:25 [error] 3763493#3763493: *107815 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.71.102.82, server: ldn.no1knows.com, request: "GET /blog/wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "blog.no1knows.com"
2026/01/19 16:37:25 [error] 3763493#3763493: *107815 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.71.102.82, server: ldn.no1knows.com, request: "GET /wordpress/wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "blog.no1knows.com"
2026/01/19 16:37:29 [error] 3763493#3763493: *107815 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.71.102.82, server: ldn.no1knows.com, request: "GET /store/wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "blog.no1knows.com"
...
show less
Brute-Force
Bad Web Bot
๐ณ๐ฑ
mawan
2025-08-30 20:20:25
(10 months ago)
Suspected of having performed illicit activity on AMS server.
Web App Attack
๐ฉ๐ช
Blexyel
2025-07-29 19:44:51
(11 months ago)
172.71.102.82 - - [29/Jul/2025:21:44:51 +0200] "GET /.git/config HTTP/1.1" 404 13 "-" "Mozilla/5.0 ( ...
show more
172.71.102.82 - - [29/Jul/2025:21:44:51 +0200] "GET /.git/config HTTP/1.1" 404 13 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0 x64; en-US; rv:1.9pre) Gecko/2008072421 Minefield/3.0.2pre"
...
show less
Brute-Force
Web App Attack