🇺🇸
WizardsToolkit
2026-03-21 05:54:06
(2 months ago)
tried to access forbidden files; attempted to access /wtk/contactUs.php
Web App Attack
🇺🇸
TPI-Abuse
2026-01-08 15:33:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 10:33:03.254754 2026] [security2:error] [pid 10757:tid 10757] [client 209.50.171.181:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thectegroup.net"] [uri "/.env"] [unique_id "aV_OL8EAIV4CG5Dz7e_aHwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-31 00:58:13
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-12-30 20:37:15
(5 months ago)
"GET /.git/HEAD HTTP/1.1"
Hacking
Web App Attack
🇩🇪
iNetWorker
2025-12-30 09:54:41
(5 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:36:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:36:25.320471 2025] [security2:error] [pid 6887:tid 6887] [client 209.50.171.181:39533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidnevueconcerts.com"] [uri "/.svn/wc.db"] [unique_id "aVIFSV5hvNbx3eKLmtqGZwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 07:06:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:06:30.622554 2025] [security2:error] [pid 28058:tid 28058] [client 209.50.171.181:9663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.legionellaexperts.org"] [uri "/.env"] [unique_id "aSam9jQr10FgmGQoEldhcgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:31:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:31:48.124233 2025] [security2:error] [pid 23350:tid 23350] [client 209.50.171.181:42167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jonnyonthespot.biz"] [uri "/.git/HEAD"] [unique_id "aSaQxDireT7o-M2cLDSKBgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:42:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:42:04.258892 2025] [security2:error] [pid 30064:tid 30064] [client 209.50.171.181:48947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.vespaitaliancafe.com"] [uri "/.git/HEAD"] [unique_id "aSZM3N_AWLmbi1Rww_sYWAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-25 23:24:28
(6 months ago)
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:51:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:50:57.349967 2025] [security2:error] [pid 15617:tid 15617] [client 209.50.171.181:44369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.grandersonheatingandcooling.com"] [uri "/.svn/wc.db"] [unique_id "aSQqgftvGtArJs4mm5ApywAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:02:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:02:03.351141 2025] [security2:error] [pid 30018:tid 30018] [client 209.50.171.181:16195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.123clearmyticket.com"] [uri "/.git/HEAD"] [unique_id "aSQfCw9h4E2KHirdf29jAQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
fbarela
2025-11-19 07:00:29
(6 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
2025-11-14 13:20:18
(7 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇨🇭
backslash
2025-11-10 18:20:09
(7 months ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot