🇸🇪
SkyDancer
2026-06-30 07:43:30
(2 hours ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇩🇪
Tha_14
2026-06-30 01:39:38
(8 hours ago)
Attempt to log in with non-existing username: admin001
Bad Web Bot
🇫🇷
ELYAZ
2026-06-29 03:22:30
(1 day ago)
(y4) Failed scan -byebye- from 216.26.243.119 (GB/United Kingdom/-): (CF_ENABLE)
Hacking
🇲🇽
octageeks.com
2026-06-27 04:20:13
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
FeG Deutschland
2026-06-26 13:15:06
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
LRob.fr
2026-06-24 01:30:26
(6 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
myagent.site
2026-02-13 05:20:52
(4 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
2026-02-12 17:06:33
(4 months ago)
Malicious activity detected
Hacking
Web App Attack
2025-11-26 12:47:34
(7 months ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 12:04:35
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:04:29.123560 2025] [security2:error] [pid 15912:tid 15912] [client 216.26.243.119:47429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.growtowork.com"] [uri "/.git/HEAD"] [unique_id "aSbszWlnk_5HHCP2CaIctQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2025-11-26 04:56:07
(7 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.aws/credentials (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:51:20
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:51:16.836640 2025] [security2:error] [pid 15767:tid 15767] [client 216.26.243.119:9417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.joepaladino.com"] [uri "/.git/HEAD"] [unique_id "aSZrJKJV_98pjtRWhyJMLgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:13:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:13:27.196170 2025] [security2:error] [pid 3365541:tid 3365578] [client 216.26.243.119:49335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.creativefamily.net"] [uri "/.git/HEAD"] [unique_id "aSZUN6fsdDCHeDsqaV_QfAAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:17:20
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:17:16.573713 2025] [security2:error] [pid 19436:tid 19436] [client 216.26.243.119:35001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gaksato.com"] [uri "/.svn/wc.db"] [unique_id "aSVJ7CvgTCZ4WiOglg9PWwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack