2026-03-01 12:43:07
(3 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
F242
2026-01-30 05:18:15
(4 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 19:30:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:30:22.652098 2025] [security2:error] [pid 19299:tid 19299] [client 209.50.165.46:12995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pelicancovecondo.com"] [uri "/.git/HEAD"] [unique_id "aSdVTgooi0DtBD5mp1MHfwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:32:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:31:55.307047 2025] [security2:error] [pid 13895:tid 13915] [client 209.50.165.46:18825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citystylesseattle.meanmouse.com"] [uri "/.git/HEAD"] [unique_id "aSU_S8qATJ-N2rrGOLaMDAAAAVI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:06:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:06:22.058117 2025] [security2:error] [pid 2183:tid 2183] [client 209.50.165.46:49365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.john-bell-associates.com"] [uri "/.env"] [unique_id "aSUPHtFA4Cfao3kFz9tjwwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:30:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:30:39.200926 2025] [security2:error] [pid 13524:tid 13524] [client 209.50.165.46:33775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.arthuryeung.net"] [uri "/.env"] [unique_id "aSUGv5olPFH-lB4oIoOE0gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:44:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:43:55.277894 2025] [security2:error] [pid 21458:tid 21458] [client 209.50.165.46:13387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.joshuarawlings.com"] [uri "/.env"] [unique_id "aST7yysTv5FvKA8yY8XRqgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:09:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.165.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:09:29.095622 2025] [security2:error] [pid 28113:tid 28113] [client 209.50.165.46:22151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bmpproductions.com.aktkaro.com"] [uri "/.svn/wc.db"] [unique_id "aSTzuSo4VZRGVyL6yAwtWwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 09:34:23
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2025-10-20 16:45:01
(7 months ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
🇨🇦
wil.com
2025-10-14 04:42:37
(7 months ago)
GlobalProtect login attempts with user davidexport.
VPN IP
Brute-Force
2025-10-08 09:51:57
(8 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.08 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.08 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-06 23:31:30
(8 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-03 23:23:47
(8 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report timestamp
show less
Hacking
Brute-Force
2025-09-30 23:58:59
(8 months ago)
wordpress-trap
Web App Attack