2026-03-26 14:32:10
(2 months ago)
Forum/form spam
Web Spam
🇬🇧
relianoid.com
2026-03-11 13:45:22
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇮🇹
VHosting
2026-02-18 22:19:20
(4 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(4 months ago)
Probing for Exploits
Exploited Host
Web App Attack
2025-12-30 01:47:05
(5 months ago)
2025-12-30T03:47:05.050619+02:00 zanati wp(www.sahpa.co.za)[594481]: Blocked authentication attempt ...
show more
2025-12-30T03:47:05.050619+02:00 zanati wp(www.sahpa.co.za)[594481]: Blocked authentication attempt for [email protected] from 104.207.36.200
...
show less
Web App Attack
🇨🇦
SSH-Admin
2025-12-27 22:05:38
(5 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇮🇩
Burayot
2025-11-26 06:11:23
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.36.200 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.36.200 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:48:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:48:30.404125 2025] [security2:error] [pid 5902:tid 5902] [client 104.207.36.200:9315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jacksonconstructiongroup.com"] [uri "/.git/HEAD"] [unique_id "aSaUrleY159V_WKEeO_ZIgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:30:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:30:42.050143 2025] [security2:error] [pid 9247:tid 9262] [client 104.207.36.200:37753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.bacchus.productions"] [uri "/.git/HEAD"] [unique_id "aSZmUuefRdxEWUSTWTEI_QAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:11:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:11:16.725501 2025] [security2:error] [pid 13035:tid 13035] [client 104.207.36.200:58303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.parkplacemotel.com"] [uri "/.git/HEAD"] [unique_id "aSVIhBICr2F9vxyLzFHjZwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
flws
2025-11-25 05:52:19
(6 months ago)
Using APIs to sign up a huge number of fake users
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:36:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.200 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:36:34.935046 2025] [security2:error] [pid 31978:tid 31978] [client 104.207.36.200:57321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bridgenevercrossed.com"] [uri "/.env"] [unique_id "aSQZEt93zY4qqK7AEd85jAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-19 06:58:03
(7 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
2025-11-14 08:30:45
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
nowyouknow
2025-11-12 12:01:43
(7 months ago)
Malicious Traffic/Form Submission
Phishing
Web Spam