๐ธ๐ช
Johan Finn
2025-12-12 01:17:29
(6 months ago)
malicious activity
Web App Attack
Anonymous
2025-11-25 19:00:36
(6 months ago)
(mod_security) mod_security (id:930130) triggered by 104.207.50.184 (GB/United Kingdom/-): 1 in the ...
show more
(mod_security) mod_security (id:930130) triggered by 104.207.50.184 (GB/United Kingdom/-): 1 in the last 3600 secs
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2025-11-25 05:28:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:28:36.793218 2025] [security2:error] [pid 9047:tid 9047] [client 104.207.50.184:55899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ourodyssey.us"] [uri "/.svn/wc.db"] [unique_id "aSU-hE0CUMVzWTFUHpfQPAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 04:57:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:57:39.710769 2025] [security2:error] [pid 21248:tid 21248] [client 104.207.50.184:41645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.omahareact.org"] [uri "/.svn/wc.db"] [unique_id "aSU3Q5BbW37WI6YGx2fOrQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
boxed-it
2025-11-25 04:10:00
(6 months ago)
GET /.svn/wc.db (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 03:25:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:25:16.769334 2025] [security2:error] [pid 14103:tid 14103] [client 104.207.50.184:34141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.go-rfi.com"] [uri "/.env"] [unique_id "aSUhnIBctHTFGD8ayHq3igAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 03:02:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:02:39.849346 2025] [security2:error] [pid 16179:tid 16179] [client 104.207.50.184:45173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.musicfreakcentral.com"] [uri "/.git/HEAD"] [unique_id "aSUcT6-7yaodSkGJUU14PwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 02:36:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:36:35.357120 2025] [security2:error] [pid 29072:tid 29072] [client 104.207.50.184:20803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dipseanet.com"] [uri "/.svn/wc.db"] [unique_id "aSUWM8N-pcL77zjV9ZK_SQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 02:02:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:02:22.537501 2025] [security2:error] [pid 14645:tid 14645] [client 104.207.50.184:46443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.arsenalfordemocracy.com"] [uri "/.svn/wc.db"] [unique_id "aSUOLh59Ca0dMHegPT0tXgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 01:45:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:44:59.981949 2025] [security2:error] [pid 21376:tid 21376] [client 104.207.50.184:53941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lazymanvegan.com"] [uri "/.env"] [unique_id "aSUKGyhBUB9QGkdWQtm8pQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 00:56:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:55:58.893367 2025] [security2:error] [pid 13540:tid 13540] [client 104.207.50.184:58841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.terrorismbook.com"] [uri "/.svn/wc.db"] [unique_id "aST-nsOrkHK4GfH2TQwkJgAAADw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
Rosh
2025-09-30 15:43:00
(8 months ago)
[09/30/25 17:43:00] SSH: illegal login attempts
Brute-Force
SSH
Anonymous
2025-04-06 20:59:17
(1 year ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
2025-04-05 21:48:01
(1 year ago)
Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 3 time(s); last attempt for 2025.04.05 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
2025-04-04 19:35:48
(1 year ago)
Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.04 is noted in report tim ...
show more
Attempted brute force login to web vpn 5 time(s); last attempt for 2025.04.04 is noted in report timestamp
show less
Hacking
Brute-Force