🇫🇷
ELYAZ
2026-06-01 15:14:04
(3 days ago)
(y4) Failed scan -byebye- from 104.167.25.95 (US/United States/-): (CF_ENABLE)
Hacking
🇫🇷
ELYAZ
2026-05-30 03:06:51
(5 days ago)
(y4) Failed scan -byebye- from 104.167.25.95 (US/United States/-): (CF_ENABLE)
Hacking
🇨🇭
TheCoon
2026-04-21 01:00:02
(1 month ago)
Automated: Gzip bomb download attempt
Web App Attack
Hacking
🇦🇺
oncord
2026-02-20 17:09:18
(3 months ago)
Form spam
Web Spam
🇺🇸
oncord
2026-02-11 05:22:01
(3 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-08 10:10:40
(3 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-11-25 04:08:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.167.25.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.167.25.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:08:38.462609 2025] [security2:error] [pid 10223:tid 10223] [client 104.167.25.95:29873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.iworklife.org"] [uri "/.svn/wc.db"] [unique_id "aSUrxhjMtzBOlsntS5d_7gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:09:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.167.25.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.167.25.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:09:35.851368 2025] [security2:error] [pid 14837:tid 14837] [client 104.167.25.95:33773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.charamand.com"] [uri "/.env"] [unique_id "aSUP37B8Tc46gWPzh8KTQwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:21:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.167.25.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.167.25.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:20:57.204921 2025] [security2:error] [pid 19488:tid 19488] [client 104.167.25.95:21305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.shawnlayne.com"] [uri "/.git/HEAD"] [unique_id "aSUEeQ2YVL0qnpfSZc-AXAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 23:59:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.167.25.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.167.25.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 18:59:29.854078 2025] [security2:error] [pid 17023:tid 17082] [client 104.167.25.95:31725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pwihatah.plumeraproductions.com"] [uri "/.git/HEAD"] [unique_id "aSTxYb1hG8E8_fObGRhOEQAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 07:44:12
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-10-18 10:38:11
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇨🇦
wil.com
2025-10-16 02:19:31
(7 months ago)
GlobalProtect login attempts with user tammra.
VPN IP
Brute-Force
2025-10-14 08:15:42
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.14 is noted in report timestamp
show less
Hacking
Brute-Force
🇧🇷
hostseries
2025-10-12 04:31:11
(7 months ago)
Trigger: LF_DISTATTACK
Brute-Force