🇫🇷
LRob.fr
2026-01-12 13:15:05
(5 months ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇬🇧
Swiptly
2026-01-08 11:59:27
(5 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
2026-01-05 20:10:53
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇧🇪
voormedia
2025-12-30 17:10:14
(5 months ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:12:12
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:12:07.164908 2025] [security2:error] [pid 8414:tid 8427] [client 209.50.182.155:37347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hdtv55.com"] [uri "/.env"] [unique_id "aVIbt1ar7c3ONyqKBBXDWgAAAUk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:45:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:45:00.619321 2025] [security2:error] [pid 15723:tid 15723] [client 209.50.182.155:39289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiireservations.com"] [uri "/.env"] [unique_id "aVIHTA4hWzZ6KUwgV6rjEAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:58:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:58:10.496799 2025] [security2:error] [pid 23846:tid 23846] [client 209.50.182.155:35313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.railfanfromseo.com"] [uri "/.git/HEAD"] [unique_id "aSQQElQBW4JNuV_jdzQ4IQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:37:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:37:03.219755 2025] [security2:error] [pid 24178:tid 24178] [client 209.50.182.155:13577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.starfrontiers.com"] [uri "/.svn/wc.db"] [unique_id "aSPu_5iCaecLqbGw3TQ16gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:59:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:59:02.180921 2025] [security2:error] [pid 18706:tid 18706] [client 209.50.182.155:11029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.panesarlaw.com"] [uri "/.svn/wc.db"] [unique_id "aSPmFrovEYfFdXYsIsOSzAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 03:47:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.182.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:47:41.989816 2025] [security2:error] [pid 8340:tid 8340] [client 209.50.182.155:41385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.showaddx.com"] [uri "/.git/HEAD"] [unique_id "aSPVXT9LVdm4lA1xsfTJHQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-13 18:30:51
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/13 12:28:42
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇫🇷
applemooz
2025-11-01 10:50:33
(7 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
2025-10-30 14:02:41
(7 months ago)
WordPress Brute Force
Brute-Force