🇵🇱
Roper123
2026-06-05 10:37:28
(1 week ago)
Web app exploits
Web App Attack
2026-04-27 14:13:59
(1 month ago)
Sensitive file access attempt
Hacking
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:40
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇮🇹
VHosting
2025-12-23 20:10:25
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-08 10:55:09
(6 months ago)
botnet
DDoS Attack
2025-12-02 21:55:14
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-24 09:16:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:16:02.160655 2025] [security2:error] [pid 9917:tid 9917] [client 104.207.34.122:52427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.grammaswoolens.com"] [uri "/.git/HEAD"] [unique_id "aSQiUsdKR4v9uD8WGZ7m3wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:22:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:22:12.653380 2025] [security2:error] [pid 796:tid 796] [client 104.207.34.122:16655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.southernreader.com"] [uri "/.svn/wc.db"] [unique_id "aSQVtIbqqYs_HIpdUHJLpgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:10:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:10:33.568593 2025] [security2:error] [pid 3392609:tid 3392609] [client 104.207.34.122:11783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cedricwillems.com"] [uri "/.env"] [unique_id "aSP22UHccxLQfiGSzs-FzwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-17 09:38:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 04:38:07.676917 2025] [security2:error] [pid 30586:tid 30586] [client 104.207.34.122:52077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.donalep.com"] [uri "/.env"] [unique_id "aRrs_3lrDx6FIHzKGfgFBQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 20:25:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 15:25:12.739552 2025] [security2:error] [pid 16900:tid 16900] [client 104.207.34.122:33243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.custombusinessgreetingcards.com"] [uri "/.env"] [unique_id "aRjhqBtbHPEOvT80FaJLeAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 07:12:45
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇫🇷
applemooz
2025-11-01 12:09:24
(7 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
2025-10-16 21:00:05
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.16 is noted in report timestamp
show less
Hacking
Brute-Force