🇪🇸
librebit
2026-06-06 07:48:47
(2 weeks ago)
Brute force
Brute-Force
2026-05-12 14:45:34
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-04-01 06:39:07
(2 months ago)
Forum/form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇩🇪
Packets-Decreaser.NET
2025-12-31 00:58:49
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-12-04 11:54:42
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-25 04:57:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.163.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.163.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:56:54.043589 2025] [security2:error] [pid 1817000:tid 1817032] [client 209.50.163.6:23123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rightnews.org"] [uri "/.env"] [unique_id "aSU3FpiXM9qjzOaPIgQx5AAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:10:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.163.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.163.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:10:31.998229 2025] [security2:error] [pid 31199:tid 31199] [client 209.50.163.6:50921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.specialtywebsiteservice.com"] [uri "/.env"] [unique_id "aSUsN_oLBWG45H1ESFV_AwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:47:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.163.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.163.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:47:42.782704 2025] [security2:error] [pid 12740:tid 12740] [client 209.50.163.6:50127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.husman.es"] [uri "/.svn/wc.db"] [unique_id "aSUm3k1PgcQ3GT30M1UXdAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:28:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.163.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.163.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:27:56.817596 2025] [security2:error] [pid 31729:tid 31729] [client 209.50.163.6:35475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.twowayinc.us"] [uri "/.git/HEAD"] [unique_id "aSUGHMpSv_BXwsyvrIo-ngAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-11-16 20:00:28
(7 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2025-11-13 22:34:41
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-11-02 14:57:42
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 06:47:49
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-10-14 10:10:48
(8 months ago)
Dictionary attack on Palo Alto GlobalProtect VPN portal (port 443) detected via repeated login failu ...
show more
Dictionary attack on Palo Alto GlobalProtect VPN portal (port 443) detected via repeated login failures with varying usernames.
show less
Brute-Force
2025-10-14 04:40:01
(8 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.14 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.14 is noted in report timestamp
show less
Hacking
Brute-Force