🇪🇸
librebit
2026-05-17 04:30:44
(2 weeks ago)
Brute force
Brute-Force
🇮🇹
[email protected]
2026-04-18 01:43:00
(1 month ago)
[Sat Apr 18 03:43:00.390897 2026] [authz_core:error] [pid 560720:tid 560785] [remote 104.207.43.60:1 ...
show more
[Sat Apr 18 03:43:00.390897 2026] [authz_core:error] [pid 560720:tid 560785] [remote 104.207.43.60:12425] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 12:07:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 07:07:01.804961 2026] [security2:error] [pid 26861:tid 26861] [client 104.207.43.60:24097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ajvaage.com"] [uri "/.git/config"] [unique_id "aZrxZd3I_GKizI3kJ2qaPAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-02-10 22:27:41
(3 months ago)
Try to access /admin/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 05:05:36
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:05:31.306011 2026] [security2:error] [pid 20398:tid 20398] [client 104.207.43.60:42429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idodat.com"] [uri "/config/.env"] [unique_id "aYq8m5edRnMvCgJISnOkFgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:59:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:59:49.191605 2026] [security2:error] [pid 12746:tid 12781] [client 104.207.43.60:19605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "i-masmx.com"] [uri "/backup/.git/config"] [unique_id "aYqfJS7qoT-4nEbOWPXnoAAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 22:14:13
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:14:03.769173 2026] [security2:error] [pid 15652:tid 15652] [client 104.207.43.60:55967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotglassgallery.com"] [uri "/.env"] [unique_id "aYpcKwY0WQ_4sOIxyjySlQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-14 12:48:05
(5 months ago)
botnet
DDoS Attack
2025-11-14 08:54:16
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇫🇷
applemooz
2025-11-01 11:01:35
(7 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
2025-10-17 16:33:39
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp
show less
Hacking
Brute-Force
🇨🇦
wil.com
2025-10-14 12:26:01
(7 months ago)
GlobalProtect login attempts with user lmarkham.
VPN IP
Brute-Force
🇧🇷
hostseries
2025-10-12 05:09:05
(7 months ago)
Trigger: LF_DISTATTACK
Brute-Force
2025-10-07 02:03:38
(7 months ago)
Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.07 is noted in report ti ...
show more
Attempted brute force login to web vpn 54 time(s); last attempt for 2025.10.07 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-06 12:03:34
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp
show less
Hacking
Brute-Force