🇬🇧
PeravixGroup
2026-06-09 16:14:41
(3 days ago)
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ...
show more
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇳🇿
Antinson
2026-05-22 21:44:04
(3 weeks ago)
Scraping with a high error ratio and request rate
Bad Web Bot
2026-03-03 14:18:37
(3 months ago)
"GET /.aws/credentials HTTP/1.1"
Hacking
Web App Attack
🇦🇺
oncord
2026-02-22 22:36:23
(3 months ago)
Form spam
Web Spam
🇨🇭
backslash
2026-02-19 02:40:03
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇮🇹
Progetto1
2026-02-12 04:50:10
(4 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:15:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:15:35.129121 2026] [security2:error] [pid 1036081:tid 1036199] [client 209.50.188.136:22853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killasgarage.bike"] [uri "/.env.staging"] [unique_id "aYqUx8__7REXY7sHL-BiBgAAAdE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 01:22:53
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:22:49.516262 2026] [security2:error] [pid 5269:tid 5283] [client 209.50.188.136:59631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khalessilaw.com"] [uri "/test/.git/config"] [unique_id "aYqIabk8htmo_Z-NcJ603AAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
ketovoila.pl
2026-02-10 00:51:27
(4 months ago)
ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/.git/config; UA=Mozilla/5. ...
show more
ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/.git/config; UA=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36; window=2026-02-10T00:29:11Z..2026-02-10T00:29:11Z
show less
Port Scan
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-02-10 00:50:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:50:20.234064 2026] [security2:error] [pid 28733:tid 28733] [client 209.50.188.136:13733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keystonestandard.com"] [uri "/v2/.git/config"] [unique_id "aYqAzKjnEhfaKFwSg7F0kQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 22:47:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:47:19.201590 2026] [security2:error] [pid 9939:tid 9939] [client 209.50.188.136:60281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houstontenemosunproblema.com"] [uri "/api/.env"] [unique_id "aYpj94R0wtR8Rv98kDjCnwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 20:59:38
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.188.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:59:20.991182 2026] [security2:error] [pid 26227:tid 26227] [client 209.50.188.136:51349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karakostasconstruction.com"] [uri "/.env.save"] [unique_id "aYpKqMo4cRcsbsQZHIrO0QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-02-03 01:53:17
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-01-28 19:59:11
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-01-05 23:48:03
(5 months ago)
Form spam
Web Spam