🇫🇮
sgofferj
2026-07-03 20:27:11
(18 hours ago)
Attack attempt on SIP server
Fraud VoIP
Hacking
Brute-Force
🇫🇷
Sklurk
2026-06-23 03:53:43
(1 week ago)
Web App Attack
Web App Attack
🇬🇧
PeravixGroup
2026-05-07 10:00:57
(1 month ago)
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show more
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇬🇧
PeravixGroup
2026-05-06 19:10:13
(1 month ago)
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ...
show more
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud
show less
Hacking
Exploited Host
🇳🇱
homeshowdomain.nl
2026-01-17 22:59:31
(5 months ago)
Auto-ban: >3000 req/min op 2026-01-17
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-01-16 20:47:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 15:47:39.927013 2026] [security2:error] [pid 30502:tid 30520] [client 209.50.178.86:11155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kandooo.com"] [uri "/.env"] [unique_id "aWqj62QZyjr0j3OKbalxrgAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
IROK
2025-12-31 16:18:46
(6 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
🇫🇮
Shaik Sai Meera
2025-11-28 09:30:11
(7 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2025-11-26 21:21:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 16:21:24.855447 2025] [security2:error] [pid 30887:tid 30887] [client 209.50.178.86:21843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web243.dnchosting.com"] [uri "/.svn/wc.db"] [unique_id "aSdvVKF7srP3eGVk8D9FOgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:10:46
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:10:38.204662 2025] [security2:error] [pid 15921:tid 15921] [client 209.50.178.86:34389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billdavidow.com"] [uri "/.env"] [unique_id "aSQhDtXDFCdWK04nmwEmGwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:59:33
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:59:27.322539 2025] [security2:error] [pid 12004:tid 12031] [client 209.50.178.86:45333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lesleyhcampbell.com.anthonydalessandro.com"] [uri "/.env"] [unique_id "aSQCTxG6waFzPooTm6mhvgAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:55:14
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:55:10.171688 2025] [security2:error] [pid 20954:tid 20954] [client 209.50.178.86:9227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alanrmariotti.com"] [uri "/.svn/wc.db"] [unique_id "aSPzPnZTF8Y44LwaCUPWIwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:37:41
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:37:36.856669 2025] [security2:error] [pid 5333:tid 5333] [client 209.50.178.86:17305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.1st-pick.com"] [uri "/.svn/wc.db"] [unique_id "aSPhEAHx-xXCFIMn1eiDZAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:03:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:03:22.933646 2025] [security2:error] [pid 26023:tid 26023] [client 209.50.178.86:33161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4ehardware.net"] [uri "/.git/HEAD"] [unique_id "aSPZClFRgHe8gWk1pLQ-LgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2025-11-10 17:20:24
(7 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam