🇬🇧
PeravixGroup
2026-05-15 06:01:37
(1 month ago)
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ...
show more
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2026-01-13 12:34:02
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:33:58.698906 2026] [security2:error] [pid 17733:tid 17733] [client 216.26.237.168:38241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "badgerkelley.com"] [uri "/.env"] [unique_id "aWY7tjs3UBfzVnycz-qw2QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
www.winos.me
2026-01-11 20:16:22
(5 months ago)
Banned due to high error rate on HTTP/1.1 protocol
Brute-Force
Web App Attack
🇦🇺
oncord
2026-01-02 08:16:08
(5 months ago)
Form spam
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:24
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-27 21:33:18
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 16:33:10.300051 2025] [security2:error] [pid 21745:tid 21745] [client 216.26.237.168:12793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "simplesimulations.com"] [uri "/.env"] [unique_id "aVBQltSNzkCFE-4xWnzEVAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 20:20:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 15:20:24.396112 2025] [security2:error] [pid 9512:tid 9512] [client 216.26.237.168:13367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialalchemy.com"] [uri "/.svn/wc.db"] [unique_id "aVA_iLI2fyEd56jP44SQvAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-27 16:33:10
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
2025-12-27 14:33:16
(5 months ago)
"GET /.aws/credentials HTTP/1.1"
Hacking
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-24 14:01:24
(5 months ago)
WP Login Scan Activities
Web App Attack
🇺🇸
Psycho Solutions LLC
2025-12-22 05:20:52
(5 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 12/22/2025 5:20 am (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-18 21:03:55
(6 months ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-11 06:09:27
(6 months ago)
WP Login Scan Activities
Web App Attack
2025-11-28 08:02:19
(6 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.28 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.28 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-11-20 00:44:16
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 216.26.237.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 216.26.237.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 19:44:10.362656 2025] [security2:error] [pid 26286:tid 26286] [client 216.26.237.168:60153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||admin.turedinmobiliaria.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.turedinmobiliaria.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aR5kWjThmTj5ImPlLj9m6AAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack