🇦🇺
MAGIC
2026-06-03 00:06:00
(4 days ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇬🇧
PeravixGroup
2026-05-24 09:42:47
(2 weeks ago)
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ...
show more
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇺🇸
koinkash.org
2026-05-23 01:40:15
(2 weeks ago)
They are fraudulent. Malicious threat actor requesting php file /wp-login.php
Web App Attack
🇧🇪
cmbplf
2026-05-07 04:30:56
(1 month ago)
517 requests with url.path *.env
Brute-Force
Bad Web Bot
🇬🇧
PeravixGroup
2026-05-06 17:48:35
(1 month ago)
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show more
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇺🇸
oncord
2026-03-12 08:42:06
(2 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-10 03:00:11
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:58:37.847242 2026] [security2:error] [pid 23026:tid 23026] [client 209.50.178.17:39131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "i-med.com"] [uri "/admin/.env"] [unique_id "aYqe3RVRo6hjcD5LxTZzBAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Holger
2026-02-10 02:29:39
(3 months ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:38:00
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:37:47.086744 2026] [security2:error] [pid 21146:tid 21146] [client 209.50.178.17:48675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kevintheadventurer.org"] [uri "/site/.git/config"] [unique_id "aYp92_mgotI2aIK1GpF0LAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:43:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:43:54.938128 2026] [security2:error] [pid 15095:tid 15095] [client 209.50.178.17:55939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelvinlouie.com"] [uri "/test/.git/config"] [unique_id "aYpxOtw2sNeBkIX8U3JoawAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:03:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:03:00.806468 2026] [security2:error] [pid 8429:tid 8429] [client 209.50.178.17:36203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howwegothere.info"] [uri "/.env.staging"] [unique_id "aYpnpMekfeDuMvUhvTUSqgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 22:47:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:47:01.884366 2026] [security2:error] [pid 15610:tid 15610] [client 209.50.178.17:36279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houstontenemosunproblema.com"] [uri "/.env"] [unique_id "aYpj5SPAtKWQIvvMKNk0qwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-09 21:08:23
(3 months ago)
Blocking for trying to access an exploit file: /.aws/credentials
Hacking
2025-11-06 16:34:00
(7 months ago)
Unauthorized connection attempt
Brute-Force
2025-11-02 13:10:15
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 07:02:59
Port Scan
Brute-Force
Exploited Host
Web App Attack