🇦🇺
MAGIC
2026-04-21 01:03:12
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇹
[email protected]
2026-04-18 06:31:03
(2 months ago)
[Sat Apr 18 08:31:03.318639 2026] [authz_core:error] [pid 560720:tid 560795] [remote 104.207.37.238: ...
show more
[Sat Apr 18 08:31:03.318639 2026] [authz_core:error] [pid 560720:tid 560795] [remote 104.207.37.238:50535] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php
...
show less
Brute-Force
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇳🇱
jjnxpct
2026-02-16 04:54:58
(4 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /backend/.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /backend/.env]
show less
Hacking
Web App Attack
🇺🇸
mnsf
2026-02-16 01:05:22
(4 months ago)
Too many Status 40X (13)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇺🇸
Moby
2026-02-15 12:06:05
(4 months ago)
104.207.37.238 - - [15/Feb/2026:06:06:03 -0600] "GET /dev/.git/config HTTP/1.1" 404 984
104.207.37.2 ...
show more
104.207.37.238 - - [15/Feb/2026:06:06:03 -0600] "GET /dev/.git/config HTTP/1.1" 404 984
104.207.37.238 - - [15/Feb/2026:06:06:03 -0600] "GET /admin/.git/config HTTP/1.1" 404 984
104.207.37.238 - - [15/Feb/2026:06:06:04 -0600] "GET /v2/.git/config HTTP/1.1" 404 984
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:31:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:31:23.484048 2026] [security2:error] [pid 27009:tid 27009] [client 104.207.37.238:22825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tatying.com"] [uri "/admin/.env"] [unique_id "aZGuizV-BMaVwtGha6OpxwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:12:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:12:28.194459 2026] [security2:error] [pid 19785:tid 19785] [client 104.207.37.238:48585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunshinenv.com"] [uri "/.git/config"] [unique_id "aZFVvPXrD6QJXUDPSPoa2gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2026-02-15 04:48:27
(4 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.aws/credentials (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:45:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:45:24.443990 2026] [security2:error] [pid 10728:tid 10728] [client 104.207.37.238:11471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stepiz62.com"] [uri "/v2/.git/config"] [unique_id "aZFBVB87R_6Gsi-MI5ndgwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 01:27:56
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:27:51.471411 2026] [security2:error] [pid 22888:tid 22904] [client 104.207.37.238:30051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m3sxa.com"] [uri "/admin/.git/config"] [unique_id "aZEhF3QUAKxpIYdUYRLCdgAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 00:58:21
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:58:14.798865 2026] [security2:error] [pid 6224:tid 6224] [client 104.207.37.238:38417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lundtrading.com"] [uri "/backend/.env"] [unique_id "aZEaJq3he9DZSTTsOJd3GQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 00:24:26
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:24:21.334906 2026] [security2:error] [pid 17703:tid 17703] [client 104.207.37.238:43713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lovelybeyondwords.com"] [uri "/v2/.git/config"] [unique_id "aZESNRk5wH6mv-sRQJhZggAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 00:07:23
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.37.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:07:17.246553 2026] [security2:error] [pid 27353:tid 27353] [client 104.207.37.238:15391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lopansri.com"] [uri "/admin/.git/config"] [unique_id "aZEONbfB8S5EsQnLRLZh_gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-15 00:05:46
(4 months ago)
Too many Status 40X (11)
Scanning/Probing (13)
Brute-Force
Web App Attack