🇮🇩
Burayot
2026-05-11 23:55:58
(3 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.53.249 (GB/United Kingdom/- ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.53.249 (GB/United Kingdom/-): 2 in the last 3600 secs
show less
Web App Attack
🇬🇧
PeravixGroup
2026-05-06 19:12:05
(1 month ago)
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ...
show more
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud
show less
Hacking
Exploited Host
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇮🇹
VHosting
2026-02-04 08:30:09
(4 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 07:42:17
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2025-12-21 12:42:26
(5 months ago)
Attempted brute force login to web vpn 163 time(s); last attempt for 2025.12.21 is noted in report t ...
show more
Attempted brute force login to web vpn 163 time(s); last attempt for 2025.12.21 is noted in report timestamp
show less
Hacking
Brute-Force
2025-12-19 22:05:01
(5 months ago)
Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.19 is noted in report t ...
show more
Attempted brute force login to web vpn 126 time(s); last attempt for 2025.12.19 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-11-26 12:44:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:44:04.421894 2025] [security2:error] [pid 2881339:tid 2881339] [client 104.207.53.249:50385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tiley.net"] [uri "/.svn/wc.db"] [unique_id "aSb2FAm2BE8y9CmoT2DWUgAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 12:09:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:09:54.864063 2025] [security2:error] [pid 3974607:tid 3974618] [client 104.207.53.249:14707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.killerrockandroll.com"] [uri "/.env"] [unique_id "aSbuEnDMD_Cg7IEjAOQDowAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 11:21:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:21:13.243248 2025] [security2:error] [pid 22697:tid 22697] [client 104.207.53.249:15729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.walterjhoodco.com"] [uri "/.env"] [unique_id "aSbiqVs4NsW6XxfyYqSN_gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:46:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:45:57.948948 2025] [security2:error] [pid 21774:tid 21774] [client 104.207.53.249:40369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.chezlubacov.org"] [uri "/.env"] [unique_id "aSZb1aGYROWMoKik5o3h4AAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:19:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:19:08.500291 2025] [security2:error] [pid 10092:tid 10092] [client 104.207.53.249:51661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.openmolecules.org"] [uri "/.env"] [unique_id "aSZVjAC2lEKEnU4ihLU62gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:54:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:54:22.802130 2025] [security2:error] [pid 375:tid 375] [client 104.207.53.249:36307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.puckerbottombikini.com"] [uri "/.git/HEAD"] [unique_id "aSZPvoyxiGqqy4gmPjW_SAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:29:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:29:13.812373 2025] [security2:error] [pid 16894:tid 16894] [client 104.207.53.249:34767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.memoriesin.com"] [uri "/.env"] [unique_id "aST4WTakoWZMGp6-SU6yNQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:42:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:42:55.601007 2025] [security2:error] [pid 22436:tid 22436] [client 104.207.53.249:36041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kidswow.com"] [uri "/.git/HEAD"] [unique_id "aSQaj8GRhE2foc6FXjkFpQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack