🇺🇸
TPI-Abuse
2026-02-12 08:43:48
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 03:43:43.261349 2026] [security2:error] [pid 31589:tid 31589] [client 104.207.32.62:43931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aschmidtconsulting.com"] [uri "/app/.env"] [unique_id "aY2Sv1Sq7Xj7PlgMc-K3zwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
rtbh.com.tr
2026-02-12 04:11:31
(4 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2026-02-12 02:20:23
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:20:18.014242 2026] [security2:error] [pid 28524:tid 28524] [client 104.207.32.62:40597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1214productions.com"] [uri "/.git/config"] [unique_id "aY044pv-xqM506kwNb6fVgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 20:59:48
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 15:59:44.312490 2026] [security2:error] [pid 5416:tid 5434] [client 104.207.32.62:64005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ardentsi.com"] [uri "/backup/.git/config"] [unique_id "aYztwMEhaZCp14XQisjmgAAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-10 23:00:40
(4 months ago)
Auto-ban: >3000 req/min op 2026-02-10
Hacking
Web App Attack
SSH
🇹🇷
rtbh.com.tr
2026-02-10 20:11:30
(4 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2026-02-10 15:32:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 10:32:21.161891 2026] [security2:error] [pid 8712:tid 8712] [client 104.207.32.62:51447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestattorneys.com"] [uri "/config/.env"] [unique_id "aYtPhWwdWELDqzVPk06W1wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:17:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:17:26.105256 2026] [security2:error] [pid 2838:tid 2838] [client 104.207.32.62:17193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magicflon.com"] [uri "/test/.git/config"] [unique_id "aYqxVi369MhNV4VQ6dYTngAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:45:45
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:45:40.706965 2026] [security2:error] [pid 1282:tid 1282] [client 104.207.32.62:10379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinesiologiaenmovimiento.com"] [uri "/.env.staging"] [unique_id "aYqb1P7XnFKz3J6q2YuuSwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:19:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:19:01.559220 2026] [security2:error] [pid 882251:tid 882375] [client 104.207.32.62:46277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kerrfamilyassociation.com"] [uri "/frontend/.env"] [unique_id "aYp5dTmNNsmiKCeO76fJWAAAAYo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-02-09 21:50:28
(4 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-02-09 21:25:17
(4 months ago)
2026/02/09 22:25:17 [error] 81464#103375: *1672423 access forbidden by rule, client: 104.207.32.62, ...
show more
2026/02/09 22:25:17 [error] 81464#103375: *1672423 access forbidden by rule, client: 104.207.32.62, server: karolyimusic.com, request: "GET /new/.git/config HTTP/1.1", host: "karolyimusic.com"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-02-09 21:19:41
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:19:36.918243 2026] [security2:error] [pid 20081:tid 20081] [client 104.207.32.62:61089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horse7.com"] [uri "/api/.git/config"] [unique_id "aYpPaIyY9zSSgBH1NFxKtwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
fbarela
2026-01-25 04:00:24
(4 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
2026-01-19 00:21:43
(5 months ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack