2026-11-08 12:30:32
UTC ·
(11 hours ago)
WEB attack
Brute-Force
🇺🇸
drewf.ink
2026-09-29 17:26:39
UTC ·
(1 month ago)
[17:26] Attempted HTTPS GlobalProtect login with credentials lpowell:Pa*****d1
Web App Attack
🇨🇦
Kacelly Nima
2026-09-19 20:22:30
UTC ·
(1 month ago)
Bad Web Bot
Blog Spam
Brute-Force
DDoS Attack
DNS Compromise
DNS Poisoning
Email Spam
Exploited Host
Fraud Orders
Fraud VoIP
FTP Brute-Force
Hacking
IoT Targeted
Open Proxy
Phishing
Ping of Death
Port Scan
Spoofing
SQL Injection
SSH
VPN IP
Web App Attack
Web Spam
🇩🇪
CELOS-SOC
2026-09-19 10:30:05
UTC ·
(1 month ago)
Multiple Unauthorized VPN Login Attempts
Hacking
Brute-Force
🇫🇷
Sklurk
2026-09-08 00:12:33
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇨🇿
Countryman
2026-09-04 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇩🇪
NxtGenIT
2026-09-03 00:29:10
UTC ·
(2 months ago)
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 -,
Brute-Force
🇫🇷
solution.it
2026-05-06 12:33:32
UTC ·
(6 months ago)
[Wed May 06 14:33:31.783372 2026] [php7:error] [pid 1355316:tid 1355316] [client 104.207.40.20:36515] script '/var/www/html/info.php' not found or unable to stat
Web App Attack
🇨🇭
backslash
2026-01-20 13:30:07
UTC ·
(9 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-17 07:59:53
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 02:59:47.198760 2026] [security2:error] [pid 1282:tid 1282] [client 104.207.40.20:14201] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 02:59:47.198760 2026] [security2:error] [pid 1282:tid 1282] [client 104.207.40.20:14201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kiddocommunication.com"] [uri "/.env"] [unique_id "aWtBc1IKgkiFJEYQQ5dNOAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-01-02 14:55:19
UTC ·
(10 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-12-02 19:51:40
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:51:36.779112 2025] [security2:error] [pid 12281:tid 12281] [client 104.207.40.20:25567] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:51:36.779112 2025] [security2:error] [pid 12281:tid 12281] [client 104.207.40.20:25567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftwwx.com"] [uri "/.env"] [unique_id "aS9DSGRHKUBRQH-LwvE4jgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 11:12:41
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 06:12:33.533097 2025] [security2:error] [pid 10555:tid 10555] [client 104.207.40.20:31311] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 06:12:33.533097 2025] [security2:error] [pid 10555:tid 10555] [client 104.207.40.20:31311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howtosellmorepizza.com"] [uri "/.env"] [unique_id "aS7JoQLheO3EA0xwEJIOyAAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:27:34
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:27:30.870617 2025] [security2:error] [pid 11760:tid 11780] [client 104.207.40.20:36391] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:27:30.870617 2025] [security2:error] [pid 11760:tid 11780] [client 104.207.40.20:36391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emehache.com"] [uri "/.svn/wc.db"] [unique_id "aS6U4hRTHxJ9yOS6yRvTewAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:51:52
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:51:45.085188 2025] [security2:error] [pid 27846:tid 27846] [client 104.207.40.20:31787] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:51:45.085188 2025] [security2:error] [pid 27846:tid 27846] [client 104.207.40.20:31787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photoservicesgroup.com"] [uri "/.env"] [unique_id "aS5-cWhGtUsAJ8G5JT-gtwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
