🇺🇸
mnsf
2026-06-05 16:06:03
(1 month ago)
Scanning/Probing (34)
Brute-Force
Web App Attack
🇪🇸
librebit
2026-05-17 05:16:59
(1 month ago)
Brute force
Brute-Force
2026-05-12 21:48:47
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-04-21 11:23:33
(2 months ago)
Forum/form spam
Web Spam
2026-02-25 09:45:48
(4 months ago)
Forum/form spam
Web Spam
🇺🇸
myagent.site
2026-02-09 20:06:13
(5 months ago)
Blocking for trying to access an exploit file: /.env.production
Hacking
2026-01-07 23:13:08
(6 months ago)
Forum/form spam
Web Spam
🇧🇪
cmbplf
2025-12-31 05:24:15
(6 months ago)
1.663 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:56
(6 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
techboy117
2025-12-22 14:33:31
(6 months ago)
Blocking due to password spraying. Username: dmargol
Brute-Force
🇺🇸
TPI-Abuse
2025-11-25 07:33:32
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:33:28.630418 2025] [security2:error] [pid 5622:tid 5622] [client 216.26.236.185:60319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.caonabo.com"] [uri "/.svn/wc.db"] [unique_id "aSVbyLvXyJjlI1NMUbJ9UAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:32:13
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:32:10.578225 2025] [security2:error] [pid 29872:tid 29872] [client 216.26.236.185:21371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.visitcampbellford.com"] [uri "/.svn/wc.db"] [unique_id "aSVNaolZVjMPjWGEpaTEZwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:11:43
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:11:33.538832 2025] [security2:error] [pid 21122:tid 21122] [client 216.26.236.185:24127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weddingmusicguitar.benshermanguitar.com"] [uri "/.env"] [unique_id "aSVIlRdPV60JbH2MeCBcSAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:21:51
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:21:47.026005 2025] [security2:error] [pid 11055:tid 11055] [client 216.26.236.185:59915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.reachpoint.com"] [uri "/.svn/wc.db"] [unique_id "aSQjq3JcJGWnyz-zfK7QrgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:40:07
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:39:59.379289 2025] [security2:error] [pid 19892:tid 19892] [client 216.26.236.185:58199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.williamcline.com"] [uri "/.git/HEAD"] [unique_id "aSQZ30Oz2DKpcRWB32qTEQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack