🇩🇪
excill
2026-05-27 03:14:19
(2 weeks ago)
Honeypot mesh observed 46 attack events in 24h — cowrie/dionaea/heralding/suricata
Port Scan
Hacking
Brute-Force
SSH
🇨🇭
Origon
2026-02-18 00:51:53
(3 months ago)
http-sensitive-files - IP: 104.207.61.197 - time="2026-02-18T01:51:53+01:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 104.207.61.197 - time="2026-02-18T01:51:53+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.61.197 (CA/200373) : 4h ban on Ip 104.207.61.197" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 00:47:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:47:44.992810 2026] [security2:error] [pid 31089:tid 31128] [client 104.207.61.197:46539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pattinauction.com"] [uri "/test/.git/config"] [unique_id "aZUMMHiP4rnesxlAepeRGgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-18 00:47:22
(3 months ago)
Blocking for trying to access an exploit file: /.env.staging
Hacking
🇦🇺
MAGIC
2026-01-02 03:00:08
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇱🇻
garmtech.com
2025-12-26 12:14:46
(5 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇮🇹
VHosting
2025-12-25 16:45:10
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇱
Savvii
2025-12-20 14:00:09
(5 months ago)
10 attempts against mh-misc-ban on pf221105
Web App Attack
🇨🇭
backslash
2025-12-19 14:20:05
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-11-27 13:33:30
(6 months ago)
Attempted brute force login to web vpn 1134 time(s); last attempt for 2025.11.27 is noted in report ...
show more
Attempted brute force login to web vpn 1134 time(s); last attempt for 2025.11.27 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-11-26 07:07:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:07:20.513883 2025] [security2:error] [pid 19214:tid 19214] [client 104.207.61.197:53731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.electricmeatgrinder.com"] [uri "/.git/HEAD"] [unique_id "aSanKBdxSCDN8i0nztkAkgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:59:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:59:12.372045 2025] [security2:error] [pid 12057:tid 12057] [client 104.207.61.197:22935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.madisonworkshopwest.com"] [uri "/.svn/wc.db"] [unique_id "aSaXMMdosgcnQgMKaC32mAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:57:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:57:28.435209 2025] [security2:error] [pid 11536:tid 11536] [client 104.207.61.197:39697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.no1sicko.com"] [uri "/.svn/wc.db"] [unique_id "aSZsmL9dwJkqRsq7KyOesQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:00:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:00:24.041704 2025] [security2:error] [pid 25991:tid 25991] [client 104.207.61.197:41625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lenorasflowers.com"] [uri "/.env"] [unique_id "aSZfOP07ysiFbP20mTDpIAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:15:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:15:31.488280 2025] [security2:error] [pid 12262:tid 12262] [client 104.207.61.197:13811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.darvintyne.com"] [uri "/.env"] [unique_id "aSQiM4z5RHlPihHGVN4DnwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack