|
🇧🇪
sid3windr
|
|
GET /.git/config (Tarpitted for 2m10s, wasted 7.73kB)
|
Web App Attack
|
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
|
🇳🇱
BlueWire Hosting
|
|
Probing websites for vulnerabilities
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.251.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:21:56.507453 2025] [security2:error] [pid 25485:tid 25485] [client 216.26.251.3:46581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.viacarduccichicago.com"] [uri "/.svn/wc.db"] [unique_id "aSaqlJNDB0ZKedyWiSZu8wAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.251.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:33:20.121413 2025] [security2:error] [pid 30539:tid 30539] [client 216.26.251.3:16741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.waycoradio.com"] [uri "/.svn/wc.db"] [unique_id "aSaRIHRBw_Qr9arnfw4YQQAAABQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.251.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:08:57.776893 2025] [security2:error] [pid 3976:tid 3976] [client 216.26.251.3:26433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.grantjennings.com"] [uri "/.svn/wc.db"] [unique_id "aSZvSeaV_nC47pp148I-7AAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇱🇻
garmtech.com
|
|
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.251.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:49:02.501418 2025] [security2:error] [pid 1565:tid 1565] [client 216.26.251.3:12867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mairslair.com"] [uri "/.svn/wc.db"] [unique_id "aSP_3tGdOtE-vZs_Uhb3wwAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
This IP was involved in an brute force and password spray attack on 2025/11/13 12:28:40
|
Port Scan
Brute-Force
Exploited Host
Web App Attack
|
|
|
Anonymous
|
|
216.26.251.3 (US/United States/-), 10 distributed sshd attacks on account [redacted]
|
Brute-Force
SSH
|
|