🇫🇷
dynamix
2026-02-15 12:18:53
(3 months ago)
Multiple WAF Violations
Web App Attack
2026-02-15 11:23:45
(3 months ago)
104.207.33.73 - - [15/Feb/2026:11:23:40 +0000] "GET /.env HTTP/1.1" 404 47530 "-" "Mozilla/5.0 (Wind ...
show more
104.207.33.73 - - [15/Feb/2026:11:23:40 +0000] "GET /.env HTTP/1.1" 404 47530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:08:25
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:08:20.070043 2026] [security2:error] [pid 17999:tid 17999] [client 104.207.33.73:64443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oualierealty.com"] [uri "/backend/.env"] [unique_id "aZGpJE_wzwCkq4S_Se1MUwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:28:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:28:39.943623 2026] [security2:error] [pid 857423:tid 857423] [client 104.207.33.73:12661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sawyerwest.com"] [uri "/.env.local"] [unique_id "aZFZh6HMDI3M-Rn8rnnZEQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-15 05:18:20
(3 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇬🇧
Apache
2026-02-15 05:17:26
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (US/United States/-): 5 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (US/United States/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
🇺🇸
myagent.site
2026-02-15 05:05:45
(3 months ago)
Blocking for trying to access an exploit file: /api/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-15 04:57:51
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:57:48.341609 2026] [security2:error] [pid 19525:tid 19525] [client 104.207.33.73:13427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "obfetal.com"] [uri "/wp/.git/config"] [unique_id "aZFSTNnJjR0S-LZ0Qloy4wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-02-15 04:15:04
(3 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:11:37
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:11:33.730470 2026] [security2:error] [pid 31112:tid 31112] [client 104.207.33.73:49449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "samcdevitt.com"] [uri "/.env"] [unique_id "aZFHdXiydXPubeMMZ7gOlAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:14:10
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:14:01.843869 2026] [security2:error] [pid 11939:tid 11939] [client 104.207.33.73:23807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabbathseminars.net"] [uri "/v2/.git/config"] [unique_id "aZE5-SBpJgpLwmQ39arCQwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 02:30:22
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:30:12.915075 2026] [security2:error] [pid 5115:tid 5115] [client 104.207.33.73:32265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plazacristal.com"] [uri "/test/.git/config"] [unique_id "aZEvtMWIXpiAdRWdUhqR4AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
alph44
2026-02-15 01:28:32
(3 months ago)
(mod_security) mod_security (id:949110) triggered by 104.207.33.73 (US/United States/-): 5 in the la ...
show more
(mod_security) mod_security (id:949110) triggered by 104.207.33.73 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 01:25:17
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:25:10.380983 2026] [security2:error] [pid 1101287:tid 1101287] [client 104.207.33.73:9851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ncparanormalresearch.com"] [uri "/.env.staging"] [unique_id "aZEgdjLmQs_gJUH7b_6xOAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-02-15 01:12:05
(3 months ago)
Web attack/malicious scanning detected
Web App Attack