2026-03-21 13:44:02
(2 months ago)
Malicious activity detected
Hacking
Web App Attack
🇩🇪
stinpriza
2026-02-16 13:03:22
(3 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 12:26:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:26:48.222716 2026] [security2:error] [pid 10365:tid 10365] [client 104.207.38.211:19799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title15.com"] [uri "/.env"] [unique_id "aZG7iK7qwmTTbEi5K9zh8wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2026-02-15 11:53:01
(3 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:24:51
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:24:44.402077 2026] [security2:error] [pid 4353:tid 4353] [client 104.207.38.211:56267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thevillageartcenter.com"] [uri "/admin/.git/config"] [unique_id "aZGs_IP6hBmWlE38R-7YBwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-15 07:05:38
(3 months ago)
Scanning/Probing (25)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 01:53:48
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:53:41.864640 2026] [security2:error] [pid 20947:tid 20947] [client 104.207.38.211:24335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mydarklady.com"] [uri "/.env.staging"] [unique_id "aZEnJZp2YkHl3TCf5SMusgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-15 01:00:21
(3 months ago)
Blocking for trying to access an exploit file: /v2/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-15 00:52:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:52:37.382624 2026] [security2:error] [pid 27008:tid 27008] [client 104.207.38.211:27029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrgutierrezshow.com"] [uri "/backup/.git/config"] [unique_id "aZEY1YrZs0Jz_jugqZagsAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 23:18:31
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 18:18:25.642459 2026] [security2:error] [pid 2171:tid 2283] [client 104.207.38.211:21133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livetalkusa.com"] [uri "/.env"] [unique_id "aZECwRdun7oDywmMCK4BZwAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 22:14:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:14:36.636659 2026] [security2:error] [pid 1618:tid 1618] [client 104.207.38.211:44975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mohsep-eg.com"] [uri "/admin/.git/config"] [unique_id "aZDzzBtBiwBokUkLdJadrAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 21:40:38
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 16:40:30.467068 2026] [security2:error] [pid 28999:tid 28999] [client 104.207.38.211:10973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lendren.com"] [uri "/.env.staging"] [unique_id "aZDrzj3bTi-AimxyqkkYNQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 21:24:09
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 16:24:03.539927 2026] [security2:error] [pid 6358:tid 6358] [client 104.207.38.211:60725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miroddi.com"] [uri "/frontend/.env"] [unique_id "aZDn8_J-eno-yrWdskOuggAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-11 09:01:00
(3 months ago)
SMS pumping
DDoS Attack
VPN IP
Bad Web Bot
Web App Attack
🇮🇹
mgarofano80
2026-01-22 21:54:53
(4 months ago)
Brute-Force
Web App Attack