🇮🇩
securejdprop
2026-10-09 23:54:17
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 65).
show less
Hacking
Web App Attack
🇮🇩
securejdprop
2026-10-03 14:15:57
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 66).
show less
Hacking
Web App Attack
🇺🇸
drewf.ink
2026-09-29 13:41:52
(2 weeks ago)
[13:41] Attempted HTTPS GlobalProtect config retrieval with credentials afowler:W******1 (getconfig. ...
show more
[13:41] Attempted HTTPS GlobalProtect config retrieval with credentials afowler:W******1 (getconfig.esp - some brute-force tooling targets this directly instead of login.esp)
show less
Web App Attack
🇺🇸
drewf.ink
2026-09-28 21:23:30
(2 weeks ago)
[21:23] Attempted HTTPS GlobalProtect login with credentials cnavarro:Pa*****d1
Web App Attack
🇫🇷
Sklurk
2026-09-09 03:10:23
(1 month ago)
Web App Attack
Web App Attack
🇨🇿
Countryman
2026-09-05 00:10:02
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-02 17:51:12
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:10:33
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:10:29.426989 2026] [security2:error] [pid 11860:tid 11860] [client 209.50.181.29:12773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgesmarina.com"] [uri "/api/.git/config"] [unique_id "aYqhpd1BgMQwcbn9hCyhRAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-30 13:02:09
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 08:02:02.633247 2025] [security2:error] [pid 23998:tid 23998] [client 209.50.181.29:16447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lenosillevis.com"] [uri "/.env"] [unique_id "aVPNStY3cvy0iaTrJhybJgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 03:46:12
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:46:08.720278 2025] [security2:error] [pid 32148:tid 32148] [client 209.50.181.29:40859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackweddingnapkins.com"] [uri "/.svn/wc.db"] [unique_id "aVH5gBcXoMM3Nb-lPWrY9wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-12-12 00:29:07
(10 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-25 03:10:22
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:10:12.805919 2025] [security2:error] [pid 28641:tid 28641] [client 209.50.181.29:14635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jessmay.com"] [uri "/.git/HEAD"] [unique_id "aSUeFAg4YxvKLQLs-9UXvQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:13:15
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:13:10.743715 2025] [security2:error] [pid 13973:tid 13973] [client 209.50.181.29:46855] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jbernsteinpc.com"] [uri "/.git/HEAD"] [unique_id "aSUCpr5k2al1GFTrMShaTAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:49:59
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:49:26.560241 2025] [security2:error] [pid 715:tid 715] [client 209.50.181.29:24393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wpwlv.com"] [uri "/.svn/wc.db"] [unique_id "aSQOBnbYXTdWQ2ydIJG-OgAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:27:49
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:27:39.918225 2025] [security2:error] [pid 30529:tid 30529] [client 209.50.181.29:30589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bizzybeejunkremoval.com"] [uri "/.git/HEAD"] [unique_id "aSPeu31792y390axaSnc_wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
