🇺🇸
TPI-Abuse
2025-12-31 01:51:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 20:51:37.965917 2025] [security2:error] [pid 988727:tid 988748] [client 104.207.34.246:28671] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.selecttech.org"] [uri "/.svn/wc.db"] [unique_id "aVSBqV8-FV7n5yAh1JEtdQAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:58
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-29 11:25:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:25:21.774698 2025] [security2:error] [pid 14530:tid 14530] [client 104.207.34.246:24705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title40.com"] [uri "/.svn/wc.db"] [unique_id "aVJlIWHmoWkGZ8ZjrEMKswAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 09:00:46
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:00:42.601133 2025] [security2:error] [pid 19341:tid 19341] [client 104.207.34.246:26543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrowheadornamentals.com"] [uri "/.git/HEAD"] [unique_id "aVJDOn7-5LERLbhmra8FrAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 07:40:13
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 02:40:08.910257 2025] [security2:error] [pid 23968:tid 23968] [client 104.207.34.246:13949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffhinkley.com"] [uri "/.svn/wc.db"] [unique_id "aVIwWGPCmSd9x_wsPCXLgAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:16:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:16:21.820817 2025] [security2:error] [pid 1557:tid 1557] [client 104.207.34.246:59547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martinvjohnson.com"] [uri "/.env"] [unique_id "aVIctdOA0liUUEKjhbCEjgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:06:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:06:51.516543 2025] [security2:error] [pid 26972:tid 26972] [client 104.207.34.246:38673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilikeabe.com"] [uri "/.env"] [unique_id "aVH-W9DO6DgOHiNd_Kxb4gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-12-23 12:30:22
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-11-14 02:18:33
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-10-27 08:13:16
(7 months ago)
wordpress-trap
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-10-27 05:47:07
(7 months ago)
WP Login Scan Activities
Web App Attack
2025-10-27 03:14:00
(7 months ago)
wordpress-trap
Web App Attack
2025-10-26 20:18:53
(7 months ago)
wordpress-trap
Web App Attack
2025-10-24 19:48:33
(7 months ago)
wordpress-trap
Web App Attack
2025-10-22 15:24:06
(7 months ago)
wordpress-trap
Web App Attack