🇩🇪
georgengelmann
2026-07-26 05:29:26
(2 days ago)
Failed login attempt for admin
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-05-31 05:05:31
(1 month ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-05-31 03:05:32
(1 month ago)
Abuse Detected (2)
Brute-Force
Web App Attack
🇬🇧
Oakley
2026-05-31 02:40:26
(1 month ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:40
(6 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇧🇷
hostseries
2025-12-24 06:50:50
(7 months ago)
Trigger: LF_DISTATTACK
Brute-Force
🇬🇧
openstrike.co.uk
2025-12-21 12:09:20
(7 months ago)
9 packets to port 2083
Port Scan
2025-12-09 16:04:54
(7 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-11-25 03:57:38
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:57:30.127867 2025] [security2:error] [pid 20027:tid 20027] [client 216.26.243.95:36861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zoesaadeh.com"] [uri "/.git/HEAD"] [unique_id "aSUpKkq8F-7xGXEAcaN_gQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:33:31
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:33:27.266369 2025] [security2:error] [pid 16460:tid 16460] [client 216.26.243.95:14139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rixcoca.com"] [uri "/.env"] [unique_id "aSUjh2_g9XSv0T_9i5wC0gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:00:43
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:00:35.183214 2025] [security2:error] [pid 10718:tid 10718] [client 216.26.243.95:57651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.folkdancers.org"] [uri "/.env"] [unique_id "aSUNw-tj0R08Y7Lxq81q6wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:02:31
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:02:24.782427 2025] [security2:error] [pid 8891:tid 8891] [client 216.26.243.95:11689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bodybuildbid.com"] [uri "/.svn/wc.db"] [unique_id "aSTyEDZIzj2de76zJt2LkQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack