๐บ๐ธ
TPI-Abuse
2026-09-02 06:59:01
(19 minutes ago)
(mod_security) mod_security (id:210492) triggered by 155.2.219.32 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 155.2.219.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:58:58.047188 2026] [security2:error] [pid 17774:tid 17774] [client 155.2.219.32:33204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danafrostick.com"] [uri "/.env"] [unique_id "apfJMmQqQP5frjqXT7wgogAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 06:41:30
(36 minutes ago)
(mod_security) mod_security (id:210492) triggered by 155.2.219.32 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 155.2.219.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:41:23.540500 2026] [security2:error] [pid 6395:tid 6395] [client 155.2.219.32:39124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "damonmarks.com"] [uri "/.git/HEAD"] [unique_id "apfFE_xV0SrokvajvAGmZQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 06:21:43
(56 minutes ago)
(mod_security) mod_security (id:210492) triggered by 155.2.219.32 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 155.2.219.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:21:34.890658 2026] [security2:error] [pid 14293:tid 14293] [client 155.2.219.32:36066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "damgoodit.com"] [uri "/.git/HEAD"] [unique_id "apfAbvCLvwxws_S2Ki21LgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-08-24 03:12:47
(1 week ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-23 03:12:37
(1 week ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-22 03:12:34
(1 week ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-20 03:12:38
(1 week ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-19 03:12:03
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-17 03:12:46
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-15 03:13:07
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-13 03:13:04
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-12 03:13:00
(3 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ฎ๐ฉ
sockominfo
2026-08-12 00:00:10
(3 weeks ago)
Postfix: Multiple SASL authentication failures.. Threat Score: 6.3/10 (MEDIUM). Reported by Tangeran ...
show more
Postfix: Multiple SASL authentication failures.. Threat Score: 6.3/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
๐ฉ๐ฐ
powerhostingdk
2026-08-11 22:52:20
(3 weeks ago)
[mailserver] CrowdSec detected crowdsecurity/postfix-spam (6 events). Automated abuse report.
Email Spam
Brute-Force
๐ง๐ท
Peregrine
2026-08-10 03:13:01
(3 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:2 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 155.2.219.32 172.69.39.162 - - [05/Aug/2026:06:23:27 -0300] "GET /xmlrpc.php HTTP/1.1" 404 18193
show less
Bad Web Bot