🇩🇪
FeG Deutschland
2026-06-24 12:33:27
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇫🇷
Sklurk
2026-06-20 05:19:14
(6 days ago)
Web App Attack
Web App Attack
2026-01-05 20:23:22
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-12-02 19:16:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:16:31.179763 2025] [security2:error] [pid 29581:tid 29581] [client 209.50.187.174:47473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vintageamptubes.com"] [uri "/.svn/wc.db"] [unique_id "aS87D6xnk8Z0IzkJHDnCxAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:45:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:45:29.374346 2025] [security2:error] [pid 19443:tid 19466] [client 209.50.187.174:55941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danfriel.com"] [uri "/.git/HEAD"] [unique_id "aS6ZGTufS__gaNU5_bPeXgAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:53:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:53:05.828791 2025] [security2:error] [pid 30429:tid 30429] [client 209.50.187.174:32005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schrankhome.com"] [uri "/.git/HEAD"] [unique_id "aS5-wf7DQKGSRLFIluLYrQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
afleventoffice.com.au
2025-12-01 13:48:51
(6 months ago)
GET /.git/HEAD HTTP/1.1
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:53:56
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:53:42.460506 2025] [security2:error] [pid 1816809:tid 1816921] [client 209.50.187.174:34019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "councilofforeignministers.aafm.us"] [uri "/.env"] [unique_id "aSVEZo6NxcAqrEXFy88pRAAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:17:13
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:17:06.889088 2025] [security2:error] [pid 24738:tid 24738] [client 209.50.187.174:54727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aaamessage.com"] [uri "/.env"] [unique_id "aSUtwrQCwvp1w9GwHyVw5AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:29:53
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:29:38.988410 2025] [security2:error] [pid 7187:tid 7187] [client 209.50.187.174:26685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mymuscles.com"] [uri "/.env"] [unique_id "aSUUkulTuPAArZgys4ACrwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-02 13:28:46
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 07:23:42
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-10-27 02:52:41
(7 months ago)
wordpress-trap
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-10-26 03:53:36
(8 months ago)
WP Login Scan Activities
Web App Attack
2025-10-25 23:57:11
(8 months ago)
wordpress-trap
Web App Attack
2025-10-25 02:41:57
(8 months ago)
wordpress-trap
Web App Attack