2026-06-11 17:23:22
(3 days ago)
Web Spam
🇬🇧
PeravixGroup
2026-06-09 19:31:37
(5 days ago)
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ...
show more
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
2026-04-12 05:48:12
(2 months ago)
Attempt to scan vulnerabilities
Hacking
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
2026-03-19 10:27:37
(2 months ago)
Forum/form spam
Web Spam
🇺🇸
TRoden
2026-03-04 04:14:12
(3 months ago)
Geo Block Plugin: Escalation flag(s): rce_attempt
Hacking
🇦🇺
MAGIC
2026-02-28 00:15:22
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-13 12:34:16
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:34:07.742754 2026] [security2:error] [pid 13221:tid 13221] [client 104.207.45.40:25027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "friendlyfarm4fun.com"] [uri "/.env"] [unique_id "aWY7vwWgNYFF34ceJ5RC0gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:09
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇮🇹
VHosting
2025-12-23 11:24:10
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-11 22:07:40
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-24 08:53:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:53:08.751123 2025] [security2:error] [pid 9102:tid 9102] [client 104.207.45.40:16233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.billhumphreyresearch.com"] [uri "/.svn/wc.db"] [unique_id "aSQc9DLtEy_LDEPu6YltOgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:19:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:19:49.439251 2025] [security2:error] [pid 6727:tid 6727] [client 104.207.45.40:15089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.arcdesign.me"] [uri "/.svn/wc.db"] [unique_id "aSQHFa4KqGlwSm50D1gJvQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:32:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:37.940219 2025] [security2:error] [pid 26693:tid 26693] [client 104.207.45.40:36653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pellman-world.com"] [uri "/.git/HEAD"] [unique_id "aSPf5UMj3x3m2Tiiael9nwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
wil.com
2025-10-29 05:26:58
(7 months ago)
GlobalProtect login attempts with user wojcikb.
VPN IP
Brute-Force