🇬🇧
PeravixGroup
2026-06-09 15:51:01
(1 week ago)
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ...
show more
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇩🇪
Hazzard
2026-05-21 19:55:10
(3 weeks ago)
(wordpress) Failed wordpress login from 104.207.40.26 (US/United States/Virginia/Ashburn/-/[redacted ...
show more
(wordpress) Failed wordpress login from 104.207.40.26 (US/United States/Virginia/Ashburn/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇩🇪
iNetWorker
2026-05-21 17:44:53
(3 weeks ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
oncord
2026-05-03 22:16:20
(1 month ago)
Form spam
Web Spam
🇺🇸
octageeks.com
2026-03-06 05:06:17
(3 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇫🇮
kumiko
2026-01-13 21:31:59
(5 months ago)
[2026-01-13 23:31:55] Probing for dotfiles
"GET /.env HTTP/1.1" 301
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2026-01-13 08:10:26
(5 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 1/13/2026 8:10 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 05:01:18
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:01:12.511659 2025] [security2:error] [pid 17832:tid 17832] [client 104.207.40.26:20621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houstontenemosunproblema.com"] [uri "/.env"] [unique_id "aVILGF3CLEk8y1aWx6hp4wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:13:36
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:13:28.198101 2025] [security2:error] [pid 30133:tid 30133] [client 104.207.40.26:47789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title48.com"] [uri "/.env"] [unique_id "aVH_6MgZhDtYRRKNUaaCBwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-12-18 09:50:33
(5 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 12/18/2025 9:50 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-09 15:12:56
(6 months ago)
WP Login Scan Activities
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 14:01:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 09:01:31.326212 2025] [security2:error] [pid 14916:tid 14916] [client 104.207.40.26:48321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "showaddx.com"] [uri "/.env"] [unique_id "aTbaO-ytRCbaP2GjczoLjQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 08:48:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 03:48:26.879817 2025] [security2:error] [pid 11223:tid 11223] [client 104.207.40.26:43077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crossfiregold.com"] [uri "/.git/HEAD"] [unique_id "aTaQ2g6gSlAIxUEjhsrUsgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 22:18:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 17:18:32.358668 2025] [security2:error] [pid 3244:tid 3355] [client 104.207.40.26:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raytbrown.com"] [uri "/.git/HEAD"] [unique_id "aTX9NBZM9fDlQx0ArsD7fQAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 12:54:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 07:54:41.764205 2025] [security2:error] [pid 6593:tid 6593] [client 104.207.40.26:45257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazingthailand.net"] [uri "/.svn/wc.db"] [unique_id "aTQnkYBOV0fx2_aXHDHXEwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack