🇮🇩
securejdprop
2026-09-04 02:36:41
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 68).
show less
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-03 06:19:20
(2 days ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-03 06:19:20
(2 days ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇫🇷
Sklurk
2026-08-05 01:16:11
(1 month ago)
Web App Attack
Web App Attack
2026-07-06 12:06:29
(1 month ago)
Trying to access config files
Web App Attack
🇺🇸
lostswordfish.com
2026-07-02 21:32:03
(2 months ago)
Wordfence waf block on flintlocal432
Web App Attack
🇲🇽
octageeks.com
2026-06-18 04:23:32
(2 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
Security_Whaller
2026-05-30 01:01:54
(3 months ago)
Malicious activity detected on Honeypot.
Brute-Force
Hacking
Web App Attack
🇷🇴
Fn4ticHz
2026-05-08 22:59:19
(3 months ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(6 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2025-12-27 13:45:08
(8 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 07:08:55
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:08:47.269587 2025] [security2:error] [pid 2350:tid 2350] [client 216.26.236.92:17325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ballast-capital.com"] [uri "/.svn/wc.db"] [unique_id "aSanf4URk_-8Bv6T-PbWDQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:17:05
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:17:02.778856 2025] [security2:error] [pid 16152:tid 16152] [client 216.26.236.92:36253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.crockett.ws"] [uri "/.env"] [unique_id "aSabXhIai3wrFmAfuTyLBQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:14:21
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:14:15.995800 2025] [security2:error] [pid 25245:tid 25245] [client 216.26.236.92:26865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.furballaudio.com"] [uri "/.svn/wc.db"] [unique_id "aSaMp728fi4TpWWuOhdVoQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:03:29
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.236.92 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.236.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:03:25.521752 2025] [security2:error] [pid 20681:tid 20681] [client 216.26.236.92:21123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.landtug.modeltdr.com"] [uri "/.env"] [unique_id "aSZf7RMoqrbdYs_DoAO_jAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
