🇺🇸
mnsf
2026-06-05 04:06:42
(2 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇩🇪
2048
2026-05-12 19:08:16
(3 weeks ago)
2026-05-12T21:08:14.064839+02:00 machodeer kernel: [1320810.583048] [UFW BLOCK] IN=ens3 OUT= MAC=RED ...
show more
2026-05-12T21:08:14.064839+02:00 machodeer kernel: [1320810.583048] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=104.207.46.243 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=56856 DF PROTO=TCP SPT=29229 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-05-12T21:08:15.098174+02:00 machodeer kernel: [1320811.614818] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=104.207.46.243 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=56857 DF PROTO=TCP SPT=29229 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-05-12T21:08:16.121283+02:00 machodeer kernel: [1320812.639126] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=104.207.46.243 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=56858 DF PROTO=TCP SPT=29229 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
show less
Port Scan
🇹🇷
Detmach
2026-04-08 11:32:38
(1 month ago)
Security attack detected. Multiple failed attempts from 104.207.46.243. IP banned for 1440 minutes a ...
show more
Security attack detected. Multiple failed attempts from 104.207.46.243. IP banned for 1440 minutes at 8.04.2026 14:31:57. Failed attempts: 1
show less
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:58
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-12-28 02:59:49
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-10 14:52:11
(5 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ...
show more
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
show less
DDoS Attack
SQL Injection
Exploited Host
🇺🇸
TPI-Abuse
2025-12-03 08:27:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 03:27:07.707724 2025] [security2:error] [pid 26937:tid 26944] [client 104.207.46.243:59107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaqa.org"] [uri "/.svn/wc.db"] [unique_id "aS_0W8-enDHboYhmnFBUvQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-25 23:03:45
(6 months ago)
Auto-ban: >3000 req/min op 2025-11-25
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-25 06:58:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:58:40.031404 2025] [security2:error] [pid 31330:tid 31330] [client 104.207.46.243:25783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.steamheat.steambalancing.com"] [uri "/.svn/wc.db"] [unique_id "aSVToN9JoqCwLwFmVKIB5wAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:15:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:15:28.715130 2025] [security2:error] [pid 2579:tid 2579] [client 104.207.46.243:32759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "delomel.net"] [uri "/.svn/wc.db"] [unique_id "aSUfULOL9arIXoUElUZCdgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:14:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:14:21.938949 2025] [security2:error] [pid 28827:tid 28893] [client 104.207.46.243:49809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coldwave.net"] [uri "/.git/HEAD"] [unique_id "aSUC7fbnrbvsbZk6Ob5FvAAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
hostseries
2025-10-25 03:25:10
(7 months ago)
Trigger: LF_DISTATTACK
Brute-Force
🇺🇸
kosada.com
2025-10-25 01:06:14
(7 months ago)
Web password guessing
Brute-Force
2025-10-18 12:23:13
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-18 00:28:17
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack