π³π±
Savvii
2026-09-01 02:22:23
(2 days ago)
15 attempts against mh-modsecurity-ban on lime
Brute-Force
Web App Attack
π«π·
dynamix
2026-09-01 00:30:21
(2 days ago)
Multiple WAF Violations
Web App Attack
πΊπΈ
Antairus
2026-08-31 23:42:16
(2 days ago)
Port scan detected. Scanned ports: 2083, 2082, 80. Detected by firewall.
Port Scan
2026-08-31 23:24:49
(2 days ago)
Unauthorized access (443/tcp/https)
Port Scan
Web App Attack
π΅π±
sigurg
2026-08-31 23:00:38
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
π¨π
ZdenΔk Svancar
2026-08-31 22:54:05
(2 days ago)
52.165.101.23 - - [31/Aug/2026:22:54:00 +0000] "GET /wp-config.php HTTP/1.1" 404 118 "-" "Mozilla/5. ...
show more
52.165.101.23 - - [31/Aug/2026:22:54:00 +0000] "GET /wp-config.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
52.165.101.23 - - [31/Aug/2026:22:54:03 +0000] "GET /phpinfo.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
...
show less
Port Scan
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-31 22:44:51
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 52.165.101.23 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 52.165.101.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 18:44:47.813066 2026] [security2:error] [pid 17960:tid 17960] [client 52.165.101.23:10506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "192.64.150.240"] [uri "/.git/HEAD"] [unique_id "apYD37ai0Ev8EMTdQNs3fQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-31 15:25:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 52.165.101.23 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 52.165.101.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 11:25:08.631712 2026] [security2:error] [pid 14340:tid 14340] [client 52.165.101.23:20574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.10"] [uri "/.git/HEAD"] [unique_id "amy-VImmeQ7IkBdxVOBeeAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-31 14:42:20
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 52.165.101.23 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 52.165.101.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 10:42:17.424682 2026] [security2:error] [pid 4014897:tid 4014897] [client 52.165.101.23:20609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.203"] [uri "/.git/HEAD"] [unique_id "amy0SYzgeIVVs0gRiz4g9AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-31 14:13:14
(1 month ago)
[ns1.skdns.gr] httpd-suspicious-path: iis-w3c
Hacking
Web App Attack
2026-07-31 12:31:41
(1 month ago)
denied traffic to a non-approved destination port. destination port 2095.
Port Scan
2026-07-31 12:06:50
(1 month ago)
52.165.101.23 - - [31/Jul/2026:07:06:47 -0500] "GET /.git/HEAD HTTP/1.1" 404 1288 "-" "Mozilla/5.0 ( ...
show more
52.165.101.23 - - [31/Jul/2026:07:06:47 -0500] "GET /.git/HEAD HTTP/1.1" 404 1288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
52.165.101.23 - - [31/Jul/2026:07:06:48 -0500] "GET /.git/config HTTP/1.1" 404 1288 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
52.165.101.23 - - [31/Jul/2026:07:06:49 -0500] "GET /.git/logs/HEAD HTTP/1.1" 404 1288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
...
show less
Bad Web Bot