2026-05-31 10:24:28
(5 days ago)
[ssd5.kdns.gr] httpd-login-spray-site: sites=hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; s ...
show more
[ssd5.kdns.gr] httpd-login-spray-site: sites=hparxo.gr; logs=/var/log/httpd/domains/hparxo.gr.log; samples=site_wide=true | distinct_ips=18 | /wp-login.php
show less
Hacking
Web App Attack
🇦🇺
HJ5Ss4Ju
2026-05-28 12:10:43
(1 week ago)
Blocked by Wordfence (SID 6)
Web App Attack
🇺🇸
lostswordfish.com
2026-05-23 13:46:03
(1 week ago)
Wordfence waf block on parsol
Web App Attack
🇩🇪
iNetWorker
2026-05-21 17:44:44
(2 weeks ago)
trolling for resource vulnerabilities
Web App Attack
🇷🇴
Fn4ticHz
2026-05-08 22:59:14
(3 weeks ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇬🇧
PeravixGroup
2026-05-07 20:26:18
(4 weeks ago)
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show more
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-12-02 19:53:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:53:34.208743 2025] [security2:error] [pid 21570:tid 21570] [client 104.207.48.76:42459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wallpaperpro.com"] [uri "/.svn/wc.db"] [unique_id "aS9DvlTqJNpmF_EI5WoZjQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 16:43:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 11:43:16.989653 2025] [security2:error] [pid 28461:tid 28461] [client 104.207.48.76:40193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamiesbballpool.com"] [uri "/.git/HEAD"] [unique_id "aS8XJAmasJvbvqRpvSNUjwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:27:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:27:50.428238 2025] [security2:error] [pid 16880:tid 16880] [client 104.207.48.76:14573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "randyscbcenter.com"] [uri "/.env"] [unique_id "aS6U9v_e7MpVVIpEtCWa3QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:58:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:58:32.696818 2025] [security2:error] [pid 17149:tid 17149] [client 104.207.48.76:34625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "semisysteme.com"] [uri "/.svn/wc.db"] [unique_id "aS6ACALTJnWtNWT7o7c6ZgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 02:20:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 21:20:16.834477 2025] [security2:error] [pid 28882:tid 28882] [client 104.207.48.76:54511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mastersonsmotel.ca"] [uri "/.env"] [unique_id "aS5M4EUPsKxtFLnFmo5E1gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-02 01:45:09
(6 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:24:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:22:23.875838 2025] [security2:error] [pid 32615:tid 32615] [client 104.207.48.76:10731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bitcointradingsquare.com"] [uri "/.env"] [unique_id "aSQHr4HSyq0faf0gbXvPZgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 03:49:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:49:28.836868 2025] [security2:error] [pid 2503:tid 2503] [client 104.207.48.76:33905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.usefulendeavors.org"] [uri "/.env"] [unique_id "aSPVyKh2hgZASN3B9q-vVwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-14 03:21:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.48.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 22:21:49.474350 2025] [security2:error] [pid 21071:tid 21071] [client 104.207.48.76:37845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alexetjeremy.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRagTYo2-CjU4xCTd-DZqwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack