🇬🇧
PeravixGroup
2026-05-21 03:50:14
(2 weeks ago)
Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ...
show more
Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud
show less
FTP Brute-Force
Brute-Force
2026-05-13 21:31:16
(4 weeks ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-01-30 07:38:06
(4 months ago)
wordpress-trap
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 09:37:39
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
oncord
2026-01-21 05:49:16
(4 months ago)
Form spam
Web Spam
🇨🇭
backslash
2025-12-30 12:05:05
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-12-14 12:04:24
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-26 19:22:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:22:08.923953 2025] [security2:error] [pid 991:tid 991] [client 209.50.173.185:58727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.st-johns.us"] [uri "/.git/HEAD"] [unique_id "aSdTYPDfH2m8xNFbelN7NwAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:23:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:23:12.999641 2025] [security2:error] [pid 30987:tid 30987] [client 209.50.173.185:60075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.filmpolis.com"] [uri "/.git/HEAD"] [unique_id "aSVZYEX-y6H9sUroK7p2NwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:05:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:05:23.873719 2025] [security2:error] [pid 3438:tid 3438] [client 209.50.173.185:56647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cmabiblequizzing.org"] [uri "/.svn/wc.db"] [unique_id "aSVVMwQ3DPKgm0cG4Bd55QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:34:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:34:45.367745 2025] [security2:error] [pid 8510:tid 8510] [client 209.50.173.185:51309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.edgecomix.com"] [uri "/.git/HEAD"] [unique_id "aSVOBeV8T1Awe6YgqQV1EQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:12:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:11:55.385906 2025] [security2:error] [pid 900046:tid 900046] [client 209.50.173.185:33897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.limbertree.com"] [uri "/.git/HEAD"] [unique_id "aSVIqxIUB9JmjyNTv_dWjQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:50:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:50:43.012333 2025] [security2:error] [pid 29060:tid 29060] [client 209.50.173.185:16451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hometechllc.com"] [uri "/.env"] [unique_id "aSVDs92FWVeCE1A5okKZPgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:03:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:03:35.259781 2025] [security2:error] [pid 14044:tid 14044] [client 209.50.173.185:19335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.parkgrant.com"] [uri "/.env"] [unique_id "aSU4p4JjfzN0hWVOjVTvKwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:23:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.173.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:23:20.001243 2025] [security2:error] [pid 15101:tid 15117] [client 209.50.173.185:35423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.boraozbek.com"] [uri "/.svn/wc.db"] [unique_id "aSUvOKNKS2jdjfTVKRdn2AAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack