๐ฉ๐ช
ger-stg-sifi1
2026-09-06 22:51:48
(6 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฌ๐ง
sandra361
2026-09-06 16:28:32
(12 hours ago)
Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=162.1 ...
show more
Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=162.158.88.33 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=36129 DF PROTO=TCP SPT=10102 DPT=443 WINDOW=65535 RES=0x00 ACK RST URGP=0
show less
Port Scan
๐ฌ๐ง
sandra361
2026-09-05 03:08:31
(2 days ago)
Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=162.1 ...
show more
Port scan detected: 6 attempts across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=162.158.88.33 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=2043 DF PROTO=TCP SPT=14198 DPT=443 WINDOW=65535 RES=0x00 ACK RST URGP=0
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-08-18 02:39:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 22:39:44.128909 2026] [security2:error] [pid 4401:tid 4423] [client 162.158.88.33:12484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robertbellamystudio.com"] [uri "/.git/config"] [unique_id "aoPF8KFnvYEg9bogEOBFPwAAAZQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-18 01:34:42
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 21:34:35.156605 2026] [security2:error] [pid 27305:tid 27305] [client 162.158.88.33:11538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blacksheepoffroad.com"] [uri "/.git/config"] [unique_id "aoO2q3I47X2DZXVpKS1NfQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 08:48:35
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:48:27.927723 2026] [security2:error] [pid 4933:tid 4933] [client 162.158.88.33:13036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.splashstation.org"] [uri "/.git/HEAD"] [unique_id "aoLK2xPdzjIyOsm4WNQBwAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 06:11:17
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:11:08.919906 2026] [security2:error] [pid 9303:tid 9303] [client 162.158.88.33:13955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.polymermembranes.com"] [uri "/.git/config"] [unique_id "aoKl_GxseXuuS5fKKWxNjQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 03:49:04
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 23:49:01.179910 2026] [security2:error] [pid 18803:tid 18803] [client 162.158.88.33:10528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mavikalem.org"] [uri "/.git/HEAD"] [unique_id "aoKErazkHv9CI5NNOZRUAAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 02:47:22
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 22:47:13.614916 2026] [security2:error] [pid 21953:tid 21953] [client 162.158.88.33:11488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wehaveajobforyou.org"] [uri "/.git/HEAD"] [unique_id "aoJ2MYWFEYOg-RtpZu_PiAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-15 20:28:10
(3 weeks ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
๐บ๐ธ
SOC Blue Team
2026-08-11 12:17:46
(3 weeks ago)
Tatic: TA0006 | Technique: T1110 | Source: TAP | Country Destination: BR
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-11 09:26:21
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.88.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 05:26:15.763192 2026] [security2:error] [pid 1752499:tid 1752553] [client 162.158.88.33:10567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.coloradospringsmohs.com"] [uri "/.git/config"] [unique_id "anrqt6XlkAn7oEoLzwx6SAAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
securejdprop
2026-08-11 06:21:04
(3 weeks ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
๐บ๐ธ
mawan
2026-08-05 10:49:42
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-07-31 00:08:26
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack