🇬🇧
PeravixGroup
2026-05-07 06:21:15
(5 months ago)
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ...
show more
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇬🇧
PeravixGroup
2026-05-06 19:12:10
(5 months ago)
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ...
show more
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud
show less
Hacking
Exploited Host
🇺🇸
ShadowWhisperer
2026-05-03 14:47:04
(5 months ago)
DOCKER port scan / probe. GET /secrets
Port Scan
2026-03-03 08:03:51
(7 months ago)
IM360 WAF: WordPress malicious plugin install block MV:wp-security-helper.zip
Web App Attack
2026-02-24 08:39:04
(7 months ago)
IM360 WAF: Attempt to upload malware
Hacking
2026-02-24 08:38:57
(7 months ago)
IM360 WAF: WordPress plugin/theme auto install block
Web App Attack
2026-02-15 07:13:31
(8 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇪🇸
10dencehispahard SL
2026-01-28 05:28:17
(8 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
myagent.site
2026-01-20 21:48:22
(9 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2026-01-20 19:28:48
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 14:28:42.129622 2026] [security2:error] [pid 12905:tid 12929] [client 45.3.40.8:48003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "particulierlb.com"] [uri "/.env"] [unique_id "aW_Xarr4cXr0wkqZQUPf6QAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-03 08:10:31
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 03:10:24.671907 2025] [security2:error] [pid 5469:tid 5469] [client 45.3.40.8:58027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assembliesofgodinsamoa.org"] [uri "/.svn/wc.db"] [unique_id "aS_wcHGk13_F2BKNdZqEUwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:26:26
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:26:18.662324 2025] [security2:error] [pid 8686:tid 8686] [client 45.3.40.8:28787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "customweddingnapkins.com"] [uri "/.env"] [unique_id "aSUTykFmSuZsGZt9iGlVGQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2025-03-24 09:09:52
(1 year ago)
ABV: Web Attack GET /ch-links-verlag/wp-login.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-04 18:48:51
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 13:48:45.049499 2025] [security2:error] [pid 6301:tid 6301] [client 45.3.40.8:42485] [client 45.3.40.8] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||garyoneal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "garyoneal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z8dLDT6bDnKqFPwUEn3AqAAAAAw"], referer: https://garyoneal.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-14 14:01:14
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.40.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 14 09:01:11.139533 2025] [security2:error] [pid 2093257:tid 2093257] [client 45.3.40.8:33239] [client 45.3.40.8] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iceofparadise.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iceofparadise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z69Mp67hj6fGjFNZta9nxQAAAA8"], referer: https://iceofparadise.com
show less
Brute-Force
Bad Web Bot
Web App Attack
