🇺🇸
TPI-Abuse
2026-10-11 20:37:36
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 204.217.129.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.129.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 16:37:29.076559 2026] [security2:error] [pid 10996:tid 10996] [client 204.217.129.251:54013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaibeth.com"] [uri "/.git/HEAD"] [unique_id "asvziSVBzdAC2sF6wlgihQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-10 12:22:35
(1 week ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_8 | Action: AWS API Call | Token: 95b2 ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_8 | Action: AWS API Call | Token: 95b23kxelv1qyzc6evkizbyhn | Client Tool: aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.13.11 md/pyimpl#CPython m/g,Z,b,E cfg/retry-mode#standard md...
show less
Hacking
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-05 08:49:59
(2 weeks ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 204.217.129.251 - - [05/Oct/2026:10:49:52 +0200] "GET /haakaan/.git/HEAD HTTP/1.1" 404 101311 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 10:12:11
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 204.217.129.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.129.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 06:12:04.371534 2026] [security2:error] [pid 2861:tid 2861] [client 204.217.129.251:47597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "despojosocial.com"] [uri "/.git/HEAD"] [unique_id "arZI9BUU3hNZ-ovEGOrifQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-21 22:31:23
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-04-16 03:47:38
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/16/2025 3:47 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-04-04 07:45:15
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/4/2025 7:45 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
2025-02-25 23:41:52
(1 year ago)
wordpress-trap
Web App Attack
2025-02-25 14:35:22
(1 year ago)
wordpress-trap
Web App Attack
🇺🇸
TPI-Abuse
2024-11-27 02:56:18
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 204.217.129.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 204.217.129.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 26 21:56:13.642442 2024] [security2:error] [pid 32427:tid 32427] [client 204.217.129.251:52467] [client 204.217.129.251] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||downloads.barkdull.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "downloads.barkdull.org"] [uri "/hashover-v1/moments2you247.com"] [unique_id "Z0aKTUREbbiNqHJCdqNeAQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-10-23 01:00:24
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack