2026-06-14 12:17:36
(4 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇫🇷
tecnicorioja
2026-06-13 22:01:12
(18 hours ago)
wp-login attack [13/Jun/2026:03:25:46
Brute-Force
Web App Attack
2026-06-12 08:51:02
(2 days ago)
[ssd5.kdns.gr] httpd-login-spray-site: sites=homeburger.gr; logs=/var/log/httpd/domains/homeburger.g ...
show more
[ssd5.kdns.gr] httpd-login-spray-site: sites=homeburger.gr; logs=/var/log/httpd/domains/homeburger.gr.log; samples=site_wide=true | distinct_ips=15 | /wp-login.php
show less
Hacking
Web App Attack
🇺🇸
dtorrer
2026-06-11 22:19:53
(2 days ago)
Brute-force general attack.
Brute-Force
🇺🇸
TPI-Abuse
2026-02-12 00:51:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 19:51:20.726498 2026] [security2:error] [pid 24910:tid 24910] [client 45.3.48.183:52949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armstrongpartnersllc.com"] [uri "/app/.env"] [unique_id "aY0kCP8CH904QDuSLAxwOgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:44:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:44:34.269004 2026] [security2:error] [pid 8177:tid 8177] [client 45.3.48.183:64077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibiocat.com"] [uri "/dev/.git/config"] [unique_id "aYqpomrg3pr84uVC8V2leAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:46:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:45:59.459178 2026] [security2:error] [pid 1319:tid 1319] [client 45.3.48.183:14981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinesiologiaenmovimiento.com"] [uri "/config/.env"] [unique_id "aYqb52SLeaWuqtHw-KrmZwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-09 23:28:17
(4 months ago)
Blocking for trying to access an exploit file: /.env.staging
Hacking
🇺🇸
TPI-Abuse
2026-02-09 22:03:01
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:02:54.900836 2026] [security2:error] [pid 5608:tid 5608] [client 45.3.48.183:63345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katherinehowell.us"] [uri "/wp/.git/config"] [unique_id "aYpZjruYsSA3dsCA3tEC8gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 20:46:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:46:31.623373 2026] [security2:error] [pid 1448:tid 1448] [client 45.3.48.183:38487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honorherwish.org"] [uri "/frontend/.env"] [unique_id "aYpHpy2fZJGondjCDH1k1wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
inspectorgdgt
2025-12-26 22:00:33
(5 months ago)
Credential brute-force login attempts observed (e.g., SSLVPN/auth failures).
Brute-Force
🇮🇹
flws
2025-11-25 05:52:19
(6 months ago)
Using APIs to sign up a huge number of fake users
Exploited Host
Web App Attack
🇨🇭
backslash
2025-11-16 07:13:09
(6 months ago)
Bad Web Bot
2025-11-16 07:11:25
(6 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report timestamp
show less
Hacking
Brute-Force
2025-11-13 22:54:54
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack