🇺🇸
mnsf
2026-05-16 16:05:28
(2 weeks ago)
Xmlrpc Caught (6)
Brute-Force
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-23 07:39:30
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇫🇷
LRob.fr
2026-01-12 12:45:02
(4 months ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇫🇷
Sklurk
2025-11-25 15:22:56
(6 months ago)
Web App Attack
Web App Attack
🇩🇪
Carsten
2025-11-24 10:14:46
(6 months ago)
GET [.env]
Port Scan
🇺🇸
TPI-Abuse
2025-11-24 08:17:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:17:49.663109 2025] [security2:error] [pid 4904:tid 4904] [client 104.207.62.136:57821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thesiteworks.windisfun.com"] [uri "/.env"] [unique_id "aSQUrW1TXlSrmze2stvBVgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:18:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:18:21.361540 2025] [security2:error] [pid 13342:tid 13342] [client 104.207.62.136:57285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.selfdirecteddiscovery.org"] [uri "/.svn/wc.db"] [unique_id "aSP4rbWWHsmnrtZ-Ma4wmgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:43:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:43:35.993516 2025] [security2:error] [pid 5645:tid 5645] [client 104.207.62.136:20935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.nihlabs.org"] [uri "/.git/HEAD"] [unique_id "aSPidz7dOUvSv_tjjCzHvAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 02:46:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:46:43.718517 2025] [security2:error] [pid 2535:tid 2535] [client 104.207.62.136:36781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.chatsupply.us"] [uri "/.env"] [unique_id "aSPHEw4nWPSOyUKFqt0fqAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-11-14 01:39:10
(6 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
neckaralb-admin.de
2025-11-01 07:27:56
(7 months ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2025-10-26 06:35:15
(7 months ago)
wordpress-trap
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-10-26 00:59:12
(7 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-admin/ - User Agent: N/A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-admin/ - User Agent: N/A - Timestamp: 10/26/2025 12:59 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
2025-10-25 15:23:06
(7 months ago)
wordpress-trap
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-10-24 19:00:14
(7 months ago)
WP Login Scan Activities
Web App Attack