|
Anonymous
|
|
"GET http://repo.bstnet.org/.git/HEAD HTTP/1.1"
|
Hacking
Web App Attack
|
|
|
๐ง๐ช
cmbplf
|
|
1.817 POST requests with url.path */wp-login.php
|
Brute-Force
Bad Web Bot
|
|
|
๐ฆ๐บ
RedBear IT
|
|
"DDoS against public endpoint"
|
DDoS Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 21:44:58.215924 2026] [security2:error] [pid 15549:tid 15549] [client 209.50.183.196:46975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fredlandia.com"] [uri "/wp-config.php"] [unique_id "aVslqq7HEWlD6WznFfaTqAAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ฆ๐บ
2000cn.com.au
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Hacking
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:55:43.628151 2025] [security2:error] [pid 25854:tid 25854] [client 209.50.183.196:17135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brazilianbottom.com"] [uri "/.git/HEAD"] [unique_id "aSisv7huTQBKLrfCaxfgmwAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:20:40.970523 2025] [security2:error] [pid 14435:tid 14435] [client 209.50.183.196:16979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rainwaterconstruction.net"] [uri "/.env"] [unique_id "aSQjaA0LtB8NB-u3_NKRLQAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:15:54.507683 2025] [security2:error] [pid 30919:tid 30919] [client 209.50.183.196:24425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.discountbusinessholidaycards.com"] [uri "/.git/HEAD"] [unique_id "aSQUOoKumsaKwgY5w3DAggAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:16:01.546476 2025] [security2:error] [pid 10024:tid 10024] [client 209.50.183.196:55657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.pages4you.com"] [uri "/.env"] [unique_id "aSP4IZMd8y-ukSky8r8gAgAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
This IP was involved in an brute force and password spray attack on 2025/11/13 13:53:18
|
Port Scan
Brute-Force
Exploited Host
Web App Attack
|
|
|
๐ฏ๐ต
ki3
|
|
Fail2Ban: Web App Attacks and Forum Spam 209.50.183.196 1761607965.0(JST)
|
Web Spam
Bad Web Bot
Web App Attack
|
|
|
๐ซ๐ท
Phenix Info
|
|
SSH Login failed
|
Brute-Force
SSH
|
|