🇫🇷
j-tap
2026-10-04 09:32:58
(11 hours ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
🇲🇽
octageeks.com
2026-10-02 04:06:55
(2 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
drewf.ink
2026-09-29 03:41:21
(5 days ago)
[03:41] Attempted HTTPS GlobalProtect login with credentials ddeem:Pa*****d1
Web App Attack
🇸🇪
OnTheEdge
2026-09-02 18:58:49
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇫🇷
Sklurk
2026-07-30 01:49:59
(2 months ago)
Web App Attack
Web App Attack
🇪🇸
librebit
2026-06-24 03:17:21
(3 months ago)
Brute force
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:53
(9 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-12-21 13:15:56
(9 months ago)
Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.21 is noted in report t ...
show more
Attempted brute force login to web vpn 162 time(s); last attempt for 2025.12.21 is noted in report timestamp
show less
Hacking
Brute-Force
2025-12-19 22:09:09
(9 months ago)
Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report t ...
show more
Attempted brute force login to web vpn 108 time(s); last attempt for 2025.12.19 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-12-09 21:23:24
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 16:23:17.766532 2025] [security2:error] [pid 11685:tid 11685] [client 104.207.61.6:33655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "britanniapilates.com"] [uri "/.git/HEAD"] [unique_id "aTiTRdhRaqGbby2OsYUGMAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 13:28:53
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 08:28:48.028996 2025] [security2:error] [pid 19606:tid 19606] [client 104.207.61.6:34941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildlandconservancy.com"] [uri "/.env"] [unique_id "aTgkEC6sp9oIIs5XxXQLNgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 14:42:40
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:42:35.188862 2025] [security2:error] [pid 5890:tid 5890] [client 104.207.61.6:36525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psychtraining.org"] [uri "/.git/HEAD"] [unique_id "aTWSW5gfUMmwYxAwQe1txgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-06 22:59:07
(9 months ago)
Auto-ban: >3000 req/min op 2025-12-06
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-12-06 16:55:28
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:55:25.348329 2025] [security2:error] [pid 16609:tid 16609] [client 104.207.61.6:34733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidsonmanagement.net"] [uri "/.git/HEAD"] [unique_id "aTRf_VXoe2n63t7EniI3FAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 16:15:18
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.61.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:15:10.950309 2025] [security2:error] [pid 14977:tid 14977] [client 104.207.61.6:30035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robcruickshank.net"] [uri "/.svn/wc.db"] [unique_id "aTRWjqjC18fsPQJe3pz80wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
