🇺🇸
nowyouknow
2026-05-08 00:07:12
(4 weeks ago)
(From [email protected] ) Hi,
Tiny update…
I’ve just launched a FREE giveaway, and I kept ...
show more
(From [email protected] ) Hi,
Tiny update…
I’ve just launched a FREE giveaway, and I kept a spot for you.
Grab your entry here before it shuts:
https://suniljaindvg.systeme.io/6850adaf
A winner will be picked… might as well be you, right?
To opt out of any further communications from me, please submit the form on my website
show less
Phishing
Web Spam
🇬🇧
SilverZippo
2026-03-04 11:48:58
(3 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 07:18:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:18:00.039221 2026] [security2:error] [pid 2050:tid 2050] [client 104.207.36.20:36865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kulprid.com"] [uri "/admin/.git/config"] [unique_id "aY7QKKX2K-_AyyBqTWu_GwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-13 06:05:29
(3 months ago)
Too many Status 40X (12)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 05:22:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:22:36.363611 2026] [security2:error] [pid 2308650:tid 2308650] [client 104.207.36.20:16625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knowbuddy.org"] [uri "/.env.local"] [unique_id "aY61HPTKBdcanqEiuh1hawAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-02-13 05:06:47
(3 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 03:46:23
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:46:15.574857 2026] [security2:error] [pid 7254:tid 7254] [client 104.207.36.20:30763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kildarafarms.com"] [uri "/site/.git/config"] [unique_id "aY6eh-JrqZqjc8CAHd0v8AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:25:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:25:37.394329 2026] [security2:error] [pid 2934:tid 2934] [client 104.207.36.20:21641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karyaenigma.com"] [uri "/frontend/.env"] [unique_id "aY59kVs0wZMJ1sUrhgVGtgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 20:38:27
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 15:38:21.680638 2026] [security2:error] [pid 1937992:tid 1937992] [client 104.207.36.20:17797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brittb.com"] [uri "/.env"] [unique_id "aY46PVHyn5_vKAoom5J6jAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 18:05:15
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 13:05:11.172402 2026] [security2:error] [pid 31139:tid 31139] [client 104.207.36.20:44335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ebolabooks.com"] [uri "/.git/config"] [unique_id "aY4WV3llwIMwSs__t2ePVQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 16:30:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 11:30:49.926103 2026] [security2:error] [pid 24616:tid 24616] [client 104.207.36.20:51517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artspacecleveland.org"] [uri "/.env"] [unique_id "aY4AOSHrbe6zAbZsS5EQ4QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 14:47:13
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 09:47:07.429036 2026] [security2:error] [pid 20169:tid 20169] [client 104.207.36.20:33329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aspotoftea.com"] [uri "/.git/config"] [unique_id "aY3n69qQYA81cwhe0W-J6QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 08:22:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 03:22:01.116265 2026] [security2:error] [pid 15788:tid 15788] [client 104.207.36.20:56939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edenberg.com"] [uri "/app/.env"] [unique_id "aYw8Kbw3ygNR-uE-bAHT7AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-11 08:06:15
(3 months ago)
Blocking for trying to access an exploit file: /dev/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-10 21:48:15
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.36.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 16:48:10.451041 2026] [security2:error] [pid 5501:tid 5501] [client 104.207.36.20:31269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eccentric-illusions.com"] [uri "/config/.env"] [unique_id "aYunmo3urJVdpZKKS_FJWgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack