🇺🇸
TPI-Abuse
2026-10-11 15:46:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 11:46:51.912910 2026] [security2:error] [pid 21989:tid 21989] [client 170.81.199.173:63141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justinrudd.com"] [uri "/.git/HEAD"] [unique_id "asuva_lTZ83wnRgHprbqSwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 04:47:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 00:47:31.605255 2026] [security2:error] [pid 4725:tid 4725] [client 170.81.199.173:44481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnhansonmemorial.org"] [uri "/.git/HEAD"] [unique_id "assU4xGlmWwbtgR-7xXvcgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:49:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:49:49.883399 2026] [security2:error] [pid 28060:tid 28060] [client 170.81.199.173:30821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fabandco.com"] [uri "/.git/HEAD"] [unique_id "arxqvQgY_kEMx9l5g5e2owAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-18 17:10:28
(3 weeks ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env.prod | 2026-09-18 17:10 UTC
show less
Hacking
Web App Attack
🇳🇴
jad-abuse
2026-09-17 11:43:39
(3 weeks ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe. Observed by 1 sensor(s); 2 hits.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 13:35:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:35:47.252438 2026] [security2:error] [pid 531:tid 531] [client 170.81.199.173:43929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "henrietteg.com"] [uri "/.env"] [unique_id "aqqbMxZdCsGOrYv-296nJwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 11:57:58
(2 months ago)
FortiWeb WAF: 28 attacks detected. Threat Score: 10253520. Types: Client Management(14), Signature D ...
show more
FortiWeb WAF: 28 attacks detected. Threat Score: 10253520. Types: Client Management(14), Signature Detection(14). Origin: United States.
show less
Web App Attack
2026-07-24 12:18:56
(2 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-09-12 18:19:22
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 170.81.199.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 14:19:19.464495 2025] [security2:error] [pid 4086:tid 4086] [client 170.81.199.173:53977] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||7spiritualstages.com:80|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "7spiritualstages.com"] [uri "/"] [unique_id "aMRkJy7Z2j46wutq23LNQAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
exxos
2025-05-19 07:11:01
(1 year ago)
Scripted attacks
Hacking
🇳🇱
exxos
2025-05-11 21:34:01
(1 year ago)
Scripted attacks
Hacking
🇮🇩
BPS-StatisticsIndonesia
2025-04-04 11:51:21
(1 year ago)
WP Login Scan Activities
Web App Attack
2025-03-01 15:06:08
(1 year ago)
wordpress-trap
Web App Attack
🇩🇪
BestFans.com
2024-11-18 17:10:11
(1 year ago)
Credential brute-force attacks on webpage logins
Brute-Force
