🇪🇸
librebit
2026-05-17 04:25:45
(2 weeks ago)
Brute force
Brute-Force
2026-05-13 18:29:26
(3 weeks ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-03-28 04:57:26
(2 months ago)
Forum/form spam
Web Spam
🇨🇭
backslash
2026-02-14 15:40:06
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
jcbriar
2026-01-21 09:54:00
(4 months ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-01-20 21:19:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 16:18:58.410817 2026] [security2:error] [pid 30554:tid 30554] [client 104.207.34.68:14287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackweddingfavors.com"] [uri "/.env"] [unique_id "aW_xQhQAMW0msUxgnWAluQAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-12-28 23:00:12
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
2025-12-06 12:45:40
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-28 21:52:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 16:52:15.461466 2025] [security2:error] [pid 3985:tid 3985] [client 104.207.34.68:38283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "13waggoners.com"] [uri "/.env.local"] [unique_id "aSoZjwKsCRH1uEhvk6GSdQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 13:23:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 08:23:15.081034 2025] [security2:error] [pid 899:tid 899] [client 104.207.34.68:32727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amatosdrywall.com"] [uri "/wp-config.php"] [unique_id "aSmiQ9Rt3hxgZAzHoLU4UgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 05:20:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 00:19:56.359395 2025] [security2:error] [pid 14582:tid 14582] [client 104.207.34.68:43907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "929.us"] [uri "/wp-config.txt"] [unique_id "aSkw_EyMdi5gU5OFrKFzugAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:10:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:10:26.746521 2025] [security2:error] [pid 22098:tid 22098] [client 104.207.34.68:36167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.teakprop.com"] [uri "/.svn/wc.db"] [unique_id "aSbSEvF6AM2A1xYBd624HQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:32:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:32:51.198518 2025] [security2:error] [pid 22924:tid 22924] [client 104.207.34.68:49971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.scrunchiebutt.com"] [uri "/.git/HEAD"] [unique_id "aSaRAxmzUsep4Aav6WLQhQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:12:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:12:43.459824 2025] [security2:error] [pid 23846:tid 23846] [client 104.207.34.68:51027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thediscounttoolbox.com"] [uri "/.svn/wc.db"] [unique_id "aSZwK-kOX_e2TUy21n4KrAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:17:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.34.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:17:26.836743 2025] [security2:error] [pid 28264:tid 28264] [client 104.207.34.68:14223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.unwaved.com"] [uri "/.git/HEAD"] [unique_id "aSZVJrB6LaPqcQ7k2VmMJgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack