2026-04-20 01:57:50
(1 month ago)
Forum/form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
2026-03-24 04:11:09
(2 months ago)
Forum/form spam
Web Spam
🇳🇱
jjnxpct
2026-02-14 04:52:49
(3 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env.staging (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env.staging]
show less
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-13 22:59:16
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-13
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-13 08:59:11
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:59:05.037378 2026] [security2:error] [pid 8068:tid 8068] [client 104.207.33.90:9989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamineparke.com"] [uri "/.env.staging"] [unique_id "aY7n2ephyLUUcHcMphDijgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-13 08:06:52
(3 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 07:37:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:37:38.327922 2026] [security2:error] [pid 22159:tid 22159] [client 104.207.33.90:41105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kv-10.com"] [uri "/api/.git/config"] [unique_id "aY7Uwrp65dY0gi0MEFYQHAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 05:35:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:35:28.035771 2026] [security2:error] [pid 17112:tid 17112] [client 104.207.33.90:58169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koeckeritz.com"] [uri "/api/.git/config"] [unique_id "aY64IF2SOoTACL19XuhBVQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 03:53:52
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:53:48.305496 2026] [security2:error] [pid 1275764:tid 1275764] [client 104.207.33.90:36475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andrsn.com"] [uri "/.git/config"] [unique_id "aY6gTIRJqvwqaCHsnd6qBQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-13 01:01:28
(3 months ago)
PSCSERV WPSCAN 104.207.33.90
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 00:49:03
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 19:48:55.728557 2026] [security2:error] [pid 23221:tid 23221] [client 104.207.33.90:53531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kamrynbever.com"] [uri "/api/.env"] [unique_id "aY5096wP4sIXB_HODqAlygAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-02-12 23:21:47
(3 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 21:58:02
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 16:57:57.903111 2026] [security2:error] [pid 9840:tid 9859] [client 104.207.33.90:26421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abney.info"] [uri "/.git/config"] [unique_id "aY5M5ad7oScawUZDLmBYOwAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 20:05:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.33.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 15:05:50.851582 2026] [security2:error] [pid 7340:tid 7340] [client 104.207.33.90:39593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elegantweddingnapkins.com"] [uri "/.env"] [unique_id "aY4ynsV8HQ34y-2htu7UQwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack