🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇩🇪
cloudmax
2025-12-31 00:56:52
(5 months ago)
Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, o ...
show more
Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, or hacking attempt
show less
Bad Web Bot
🇺🇸
techboy117
2025-12-22 18:58:29
(5 months ago)
Blocking due to password spraying. Username: dulceys
Brute-Force
🇺🇸
TPI-Abuse
2025-12-10 08:47:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 03:47:16.207702 2025] [security2:error] [pid 15006:tid 15092] [client 216.26.226.86:12285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tmsdvc.com"] [uri "/.git/HEAD"] [unique_id "aTkzlDxlbKzf4UNLu2aitgAAAZg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-08 17:31:49
(6 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-07 12:05:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:05:40.469486 2025] [security2:error] [pid 29707:tid 29732] [client 216.26.226.86:53053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accrediteddegree.org"] [uri "/.svn/wc.db"] [unique_id "aTVtlCq5XQUJFjJNTI-8FAAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2025-12-07 04:54:48
(6 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 09:47:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:47:38.361281 2025] [security2:error] [pid 18579:tid 18579] [client 216.26.226.86:47661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbikinis.com"] [uri "/.svn/wc.db"] [unique_id "aTKqOvTXfVUJhWlfvKH3NgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 06:22:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:22:37.290749 2025] [security2:error] [pid 32103:tid 32103] [client 216.26.226.86:32563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kotelbarmitzvah.com"] [uri "/.git/HEAD"] [unique_id "aTJ6LeeFqHYmvInpZSCpWwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-30 17:44:42
(6 months ago)
botnet
DDoS Attack
2025-11-14 17:13:36
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
techboy117
2025-11-14 00:31:07
(7 months ago)
Blocking due to password spraying.
Brute-Force
2025-10-18 03:12:18
(7 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report timestamp
show less
Hacking
Brute-Force
🇨🇦
wil.com
2025-10-13 19:12:48
(8 months ago)
GlobalProtect login attempts with user motrimble.
VPN IP
Brute-Force
2025-10-06 02:30:01
(8 months ago)
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.10.06 is noted in report tim ...
show more
Attempted brute force login to web vpn 4 time(s); last attempt for 2025.10.06 is noted in report timestamp
show less
Hacking
Brute-Force