🇪🇸
librebit
2026-05-17 04:38:05
(4 weeks ago)
Brute force
Brute-Force
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-10 03:11:55
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:11:52.993347 2026] [security2:error] [pid 14709:tid 14709] [client 209.50.173.111:30825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnerakhareedu.com"] [uri "/.env.save"] [unique_id "aYqh-IkMnWJxqDbk4ow6DAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 01:41:26
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:41:17.041340 2026] [security2:error] [pid 29444:tid 29444] [client 209.50.173.111:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hvacs-aircon.com"] [uri "/app/.env"] [unique_id "aYqMvUMJL7Q502LofI4yDAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:18:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:18:38.214884 2026] [security2:error] [pid 937968:tid 937987] [client 209.50.173.111:34193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kerrfamilyassociation.com"] [uri "/api/.env"] [unique_id "aYp5XqwhT4RZ6FzCjF2nqQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:00:50
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:00:39.957485 2026] [security2:error] [pid 12746:tid 12778] [client 209.50.173.111:25685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kd2lst.us"] [uri "/v2/.git/config"] [unique_id "aYpnFy7qoT-4nEbOWPXcNAAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 22:16:13
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:16:07.576798 2026] [security2:error] [pid 20615:tid 20615] [client 209.50.173.111:54931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotline-srm.com"] [uri "/.git/config"] [unique_id "aYpcp4ExkUuttZz6BMiXOwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-28 05:36:23
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2025-11-14 04:20:47
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-11-02 18:39:13
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 06:58:36
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇨🇦
wil.com
2025-10-17 11:00:31
(7 months ago)
GlobalProtect login attempts with user danibfer.
VPN IP
Brute-Force
🇧🇷
hostseries
2025-10-16 10:28:24
(8 months ago)
Trigger: LF_DISTATTACK
Brute-Force
2025-10-08 12:54:03
(8 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.08 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.08 is noted in report timestamp
show less
Hacking
Brute-Force
🇳🇱
EGP Abuse Dept
2025-10-01 23:18:19
(8 months ago)
Unauthorized connection to SSH port 22
Port Scan
Hacking
SSH
🇺🇸
hostseries
2025-09-30 03:51:58
(8 months ago)
Trigger: LF_DISTATTACK
Brute-Force