🇩🇪
stinpriza
2026-07-12 04:51:10
(22 hours ago)
Web App Attack
Web App Attack
🇪🇸
librebit
2026-06-24 09:51:39
(2 weeks ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-05-15 01:47:48
(1 month ago)
Brute force
Brute-Force
🇨🇦
ISPLtd
2026-03-05 02:42:10
(4 months ago)
Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config ...
show more
Hacking, URL manipulation, malformed requests, or requests for invalid/hidden files like .git/config or .env. Does not honour robots.txt.
show less
Hacking
Web App Attack
Bad Web Bot
🇩🇪
F242
2026-01-30 05:09:16
(5 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇩🇪
bontekoe.technology
2025-12-28 16:00:36
(6 months ago)
Port scan or Brute-Force detected. (src_port=50027, dst_port=80)
Brute-Force
🇮🇹
VHosting
2025-12-22 21:09:39
(6 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-09 22:43:31
(7 months ago)
botnet
DDoS Attack
2025-11-26 09:51:35
(7 months ago)
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.26 is noted in report ti ...
show more
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.26 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-11-26 05:42:20
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:42:13.427716 2025] [security2:error] [pid 30443:tid 30443] [client 104.207.46.138:54977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.janicestewart.net"] [uri "/.env"] [unique_id "aSaTNceQPx03YyrCJLYRDgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-25 23:04:50
(7 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-24.
show less
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-24 06:12:16
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:12:10.050341 2025] [security2:error] [pid 5801:tid 5801] [client 104.207.46.138:48021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alsetsystems.com"] [uri "/.env"] [unique_id "aSP3OkNxufTDg0xtKW6nrAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:41:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:41:24.775538 2025] [security2:error] [pid 4504:tid 4504] [client 104.207.46.138:17575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.qed-consulting.co"] [uri "/.git/HEAD"] [unique_id "aSPh9I1bRZrgQ6M07Z6MGAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:14:57
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.138 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:14:37.806077 2025] [security2:error] [pid 8346:tid 8346] [client 104.207.46.138:15295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dogandponyband.bridgital.com"] [uri "/.env"] [unique_id "aSPbrWKfXzqLyBvMQ7_DGwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-17 11:19:58
(7 months ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Hacking
SQL Injection
Web App Attack