2026-07-12 18:20:18
(1 day ago)
Web attack blocked by Wordfence on helenehoenjet.nl (1 hit). Reported by CRMON.
Web App Attack
2026-07-11 20:17:53
(2 days ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
lostswordfish.com
2026-07-11 06:30:06
(2 days ago)
Wordfence waf block on tranquilfrogs
Web App Attack
2026-07-11 06:06:48
(2 days ago)
Trying to access config files
Web App Attack
🇲🇽
octageeks.com
2026-07-10 04:16:39
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-07-09 20:51:44
(4 days ago)
[ns31.kdns.gr] httpd-login-spray-site: sites=www.myrofores.gr; logs=/var/log/httpd/domains/myrofores ...
show more
[ns31.kdns.gr] httpd-login-spray-site: sites=www.myrofores.gr; logs=/var/log/httpd/domains/myrofores.gr.log; samples=site_wide=true | distinct_ips=13 | /wp-login.php
show less
Hacking
Web App Attack
🇩🇪
Teufel100
2026-07-09 15:04:52
(4 days ago)
Brutforceangriff auf /xmlrpc.php
Brute-Force
Hacking
Web App Attack
🇩🇪
london2038.com
2026-07-09 01:11:26
(4 days ago)
Attacking WordPress
45.3.43.3 - - [09/Jul/2026:03:11:22 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18963 ...
show more
Attacking WordPress
45.3.43.3 - - [09/Jul/2026:03:11:22 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18963 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-07-09 00:26:57
(4 days ago)
Web App Attack
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-12 02:08:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:08:39.676054 2026] [security2:error] [pid 2608:tid 2608] [client 45.3.43.3:23745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arresteddevelopmentinsight.com"] [uri "/api/.env"] [unique_id "aY02J_eO8LSBlrT9NMZ75AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 06:06:57
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 01:06:47.195778 2026] [security2:error] [pid 4130:tid 4130] [client 45.3.43.3:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail-pmg.com"] [uri "/app/.git/config"] [unique_id "aYrK9zop2Ap94J2wFW2f_gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:11:01
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:10:54.035206 2026] [security2:error] [pid 16232:tid 16232] [client 45.3.43.3:25899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinkycouple4u.com"] [uri "/api/.env"] [unique_id "aYqhvlkVU7PVHJBmb3a8sQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:03:21
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:03:02.310049 2026] [security2:error] [pid 8428:tid 8428] [client 45.3.43.3:26645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howwegothere.info"] [uri "/frontend/.env"] [unique_id "aYpnps6nXwmBtn8ZPceyLQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 21:13:05
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:13:01.628184 2026] [security2:error] [pid 22891:tid 22891] [client 45.3.43.3:21065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karieva.com"] [uri "/frontend/.env"] [unique_id "aYpN3Ron81PwztsYDIXOLQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack