🇺🇸
TPI-Abuse
2026-02-09 21:38:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:38:35.130780 2026] [security2:error] [pid 10645:tid 10645] [client 193.56.28.169:42631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garnersystems.com"] [uri "/site/.git/config"] [unique_id "aYpT27ZiHGUKLOUceubz5AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 19:10:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:10:35.740007 2026] [security2:error] [pid 15553:tid 15553] [client 193.56.28.169:58705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "g-peopleland.com"] [uri "/app/.env"] [unique_id "aYoxK5rs_pvnhw19mfGklAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 17:59:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:59:34.343377 2026] [security2:error] [pid 851625:tid 851625] [client 193.56.28.169:10179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furfriend-z.com"] [uri "/site/.git/config"] [unique_id "aYoghtSkjJY3qZ5uraAYtQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 12:56:51
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 07:56:46.672825 2026] [security2:error] [pid 24059:tid 24059] [client 193.56.28.169:10455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundingworkingcapital.com"] [uri "/.env.production"] [unique_id "aYnZjhX5cdTFrMe4m7n8gwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 12:01:34
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 07:01:20.558563 2026] [security2:error] [pid 23064:tid 23064] [client 193.56.28.169:39415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galysh.us"] [uri "/backend/.env"] [unique_id "aYnMkMXPKOUBzrg8XS4H4AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 10:13:09
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 05:13:00.531603 2026] [security2:error] [pid 11968:tid 11968] [client 193.56.28.169:28223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabver.com"] [uri "/app/.env"] [unique_id "aYmzLP_WBAzfG9PTk1FCMQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
barbarella
2026-02-09 10:07:14
(4 months ago)
Multiple (3) times attack on http port 80: hacking attempt of version control system (GET /.git/conf ...
show more
Multiple (3) times attack on http port 80: hacking attempt of version control system (GET /.git/config)
10:07:14 Configuration snooping in .env file (GET http://gabrielhousedenver.org/backend/.env)
10:07:15 hacking attempt of version control system (GET http://gabriellablake.store/wp/.git/config)
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-08 21:27:59
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 16:27:53.152625 2026] [security2:error] [pid 5267:tid 5267] [client 193.56.28.169:50865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "futuresgrowhere.com"] [uri "/.svn/wc.db"] [unique_id "aYj_2VRVvp06-nlwEG_KEwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-19 20:57:46
(5 months ago)
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-11-30 13:09:54
(6 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-11-14 02:20:28
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇳🇱
i-turnradio.nl
2025-10-23 02:57:37
(7 months ago)
2025-10-23 @ 04:57:36 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
2025-10-18 08:24:16
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-17 16:12:35
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-15 18:39:22
(7 months ago)
Failed Wordpress login
Hacking
Brute-Force
Web App Attack