🇨🇭
backslash
2026-05-23 05:00:11
(2 weeks ago)
Bad Web Bot
2026-04-02 10:21:48
(2 months ago)
Forum/form spam
Web Spam
2026-01-25 12:40:42
(4 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-01-21 13:45:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 08:45:37.405868 2026] [security2:error] [pid 7462:tid 7462] [client 104.207.38.239:37017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "klingandi.com"] [uri "/.git/HEAD"] [unique_id "aXDYgeh1QP5qRVPyF4pjMQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-22 16:58:17
(5 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇦🇺
oncord
2025-12-14 13:24:39
(5 months ago)
Form spam
Web Spam
🇨🇴
directorioeducativo.com
2025-12-08 14:46:14
(5 months ago)
GET URL: "/.env"Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 21:50:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:50:53.346584 2025] [security2:error] [pid 29927:tid 29927] [client 104.207.38.239:22505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qualityelevatorcabs.com"] [uri "/.env"] [unique_id "aS9fPWe30PrMpLbRdex1rwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 16:29:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 11:29:49.231518 2025] [security2:error] [pid 16552:tid 16552] [client 104.207.38.239:37143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phoboschildren.com"] [uri "/.env"] [unique_id "aS8T_YlSwYIaTMQFJ-YDVgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 12:10:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:10:33.405697 2025] [security2:error] [pid 25145:tid 25145] [client 104.207.38.239:56081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anywheregarden.com"] [uri "/.git/HEAD"] [unique_id "aS7XOV-bv2OxpF8vFD9HywAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 11:54:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 06:54:12.013156 2025] [security2:error] [pid 31675:tid 31675] [client 104.207.38.239:31655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dictionaryoffish.com"] [uri "/.svn/wc.db"] [unique_id "aS7TZACn4qpm5OyaKJpxzgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
SecondEdge
2025-12-02 07:02:31
(6 months ago)
A web attack was detected from 104.207.38.239 (China) against lifeofstu.com (Git Variable Scan).
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 06:44:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:44:25.433473 2025] [security2:error] [pid 32489:tid 32489] [client 104.207.38.239:36455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rlarms.com"] [uri "/.env"] [unique_id "aS6KyVE-qPnqOY7TSQJfTAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:00:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.38.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:00:28.472707 2025] [security2:error] [pid 3466:tid 3466] [client 104.207.38.239:39049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "strippolefitness.com"] [uri "/.svn/wc.db"] [unique_id "aS5ybDV8Ggo2nvlbsJcfSwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2025-11-29 11:51:14
(6 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -28.151 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -28.151 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/
show less
Bad Web Bot
Web App Attack