🇪🇸
10dencehispahard SL
2026-01-26 07:21:56
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇫🇷
dynamix
2026-01-02 20:39:44
(5 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
2025-12-22 17:58:12
(5 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇬🇧
openstrike.co.uk
2025-12-22 08:49:09
(5 months ago)
9 packets to port 2083
Port Scan
🇳🇱
homeshowdomain.nl
2025-12-07 22:59:57
(5 months ago)
Auto-ban: >3000 req/min op 2025-12-07
Hacking
Web App Attack
SSH
2025-12-07 12:23:30
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-06 13:20:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 08:19:58.541847 2025] [security2:error] [pid 32442:tid 32442] [client 104.207.33.124:56669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "logosformacion.net"] [uri "/.env"] [unique_id "aTQtfqTsapl2pRtbzrK12wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 07:52:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:52:36.876636 2025] [security2:error] [pid 22155:tid 22155] [client 104.207.33.124:33509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "serbruyns.com"] [uri "/.git/HEAD"] [unique_id "aTKPREKSioYgt9opryuWjwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 06:54:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:54:11.948973 2025] [security2:error] [pid 3777:tid 3777] [client 104.207.33.124:41283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "airtechconsulting.com"] [uri "/.env"] [unique_id "aTKBk_xKVEFtbuAkRAyi0gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 04:23:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:23:51.796875 2025] [security2:error] [pid 18023:tid 18023] [client 104.207.33.124:35695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kim-porter.com"] [uri "/.env"] [unique_id "aTJeV-hcQkWdVUhIzO7Y2QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 23:45:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 18:45:51.123064 2025] [security2:error] [pid 19834:tid 19834] [client 104.207.33.124:24041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kevamra.com"] [uri "/.svn/wc.db"] [unique_id "aTIdLxsUx4CVjXQUgcP7EwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:35:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:34:55.999550 2025] [security2:error] [pid 28145:tid 28145] [client 104.207.33.124:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.hcoahawaii.org"] [uri "/.svn/wc.db"] [unique_id "aSbXz2iIcXVgquconKOeXQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
Smel
2025-11-26 05:52:01
(6 months ago)
HTTP/80/443/8080 Unauthorized Probe, Hack -
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:05:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:05:05.768137 2025] [security2:error] [pid 6440:tid 6440] [client 104.207.33.124:48239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sykesclan.com"] [uri "/.svn/wc.db"] [unique_id "aSaKgRRRqFORvFF7JnWTCQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:24:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:24:48.763623 2025] [security2:error] [pid 25787:tid 25787] [client 104.207.33.124:18695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tucsondivorcelawyer.com"] [uri "/.env"] [unique_id "aSZzABEh4CI8EY_YWvPLjwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack