🇬🇧
PeravixGroup
2026-05-27 21:32:16
(1 week ago)
Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ...
show more
Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud
show less
FTP Brute-Force
Brute-Force
🇫🇷
LRob.fr
2026-04-15 04:00:05
(1 month ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇹🇷
Detmach
2026-04-09 10:36:38
(1 month ago)
Security attack detected. Multiple failed attempts from 104.207.36.241. IP banned for 1440 minutes a ...
show more
Security attack detected. Multiple failed attempts from 104.207.36.241. IP banned for 1440 minutes at 9.04.2026 13:35:56. Failed attempts: 1
show less
Brute-Force
🇩🇪
Lino Project
2026-04-04 01:20:54
(2 months ago)
104.207.36.241 - - [04/Apr/2026:03:20:54 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3963 "https://www.pri ...
show more
104.207.36.241 - - [04/Apr/2026:03:20:54 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3963 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇪🇸
seoxan.es
2026-02-15 16:55:53
(3 months ago)
Form Spam
Web Spam
🇩🇪
bsoft.de
2026-01-19 01:11:58
(4 months ago)
Blocked because of abusive behavior
DDoS Attack
🇱🇻
garmtech.com
2026-01-04 22:38:53
(5 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇦🇺
oncord
2025-12-26 20:11:06
(5 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-12-09 18:37:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 13:37:47.269590 2025] [security2:error] [pid 20962:tid 20962] [client 104.207.36.241:60495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vyendari.com"] [uri "/.svn/wc.db"] [unique_id "aThse1cXlzRXkTHdAzyaiAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 16:11:52
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 11:11:46.324892 2025] [security2:error] [pid 25432:tid 25432] [client 104.207.36.241:33105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abundantwork.com"] [uri "/.env"] [unique_id "aTb4wnw-dG8t5sDMIzp6VwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 03:33:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 22:33:24.755608 2025] [security2:error] [pid 16961:tid 16961] [client 104.207.36.241:56915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yakski.com"] [uri "/.git/HEAD"] [unique_id "aTZHBGRSMkzw6Ow9OPzKDgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2025-12-06 05:44:14
(6 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 21:27:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 16:27:24.756890 2025] [security2:error] [pid 14755:tid 14770] [client 104.207.36.241:25503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nesso.es"] [uri "/.env"] [unique_id "aTNOPNdWcxyAP6MJaR21HgAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
COMPLEX
2025-12-05 20:07:51
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 200373 (DREI-K-TECH-GMBH ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 200373 (DREI-K-TECH-GMBH)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.svn/wc.db
show less
Bad Web Bot