๐ง๐ช
cmbplf
2026-05-27 13:33:58
(1 week ago)
2.743 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-02-13 13:12:50
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:12:44.781039 2026] [security2:error] [pid 29590:tid 29590] [client 104.207.32.182:40107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lavozdominicana.com"] [uri "/.env.save"] [unique_id "aY8jTCgCozGRZeVapJUWVgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-13 12:46:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 07:46:01.518071 2026] [security2:error] [pid 3553:tid 3553] [client 104.207.32.182:37435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasvegaskiss.com"] [uri "/.env.production"] [unique_id "aY8dCaSUiQ0h-ynejpFDLQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
Origon
2026-02-13 09:12:56
(3 months ago)
http-sensitive-files - IP: 104.207.32.182 - time="2026-02-13T10:12:56+01:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 104.207.32.182 - time="2026-02-13T10:12:56+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.32.182 (US/200373) : 4h ban on Ip 104.207.32.182" module=db
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-13 09:10:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:10:47.693420 2026] [security2:error] [pid 7196:tid 7211] [client 104.207.32.182:26547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metropaint.net"] [uri "/site/.git/config"] [unique_id "aY7ql_qyp2RhazXZPIYlgQAAAUk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-13 06:12:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:11:57.063033 2026] [security2:error] [pid 14599:tid 14599] [client 104.207.32.182:51955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcginleyclan.com"] [uri "/backend/.env"] [unique_id "aY7ArcJK7Kp80Oc9qirXagAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-13 05:30:23
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:30:16.624777 2026] [security2:error] [pid 14671:tid 14671] [client 104.207.32.182:62833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mauriciagandara.com"] [uri "/site/.git/config"] [unique_id "aY626KfWbAt6Pa7ri0eGyAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
myagent.site
2026-02-13 04:27:56
(3 months ago)
Blocking for trying to access an exploit file: /.aws/credentials
Hacking
๐บ๐ธ
TPI-Abuse
2026-02-13 03:45:42
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:45:36.181902 2026] [security2:error] [pid 2196829:tid 2196829] [client 104.207.32.182:46181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maritanasystems.com"] [uri "/v2/.git/config"] [unique_id "aY6eYDPNHWpOofdTymv77wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-13 03:07:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:07:15.657146 2026] [security2:error] [pid 16834:tid 16834] [client 104.207.32.182:33049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mapleleaf-marketing.com"] [uri "/v2/.git/config"] [unique_id "aY6VY7Y29rFEOH7wdfw2TAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-12 20:04:17
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 15:04:10.388730 2026] [security2:error] [pid 516010:tid 516010] [client 104.207.32.182:44145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibcountn.com"] [uri "/.git/config"] [unique_id "aY4yOiP4YrdYEq_34RjNsgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-02-12 00:35:34
(3 months ago)
104.207.32.182 - - [12/Feb/2026:00:35:34 +0000] "GET /.env.local HTTP/1.1" 302 645 "-" "Mozilla/5.0 ...
show more
104.207.32.182 - - [12/Feb/2026:00:35:34 +0000] "GET /.env.local HTTP/1.1" 302 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2026-01-05 01:45:03
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
Anonymous
2025-11-13 22:16:43
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
Anonymous
2025-10-16 08:38:11
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack