🇫🇷
masterguru
2026-03-31 12:13:24
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.129 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.129 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇫🇷
masterguru
2026-03-30 07:42:53
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.129 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.129 (US/United States/-): 1 in the last 3600 secs (0-193)
show less
Hacking
🇱🇻
garmtech.com
2026-03-30 06:22:33
(2 months ago)
IM360 WAF: WordPress plugin/theme auto install block
Web App Attack
🇫🇷
masterguru
2026-03-26 12:17:52
(3 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.129 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.39.129 (US/United States/-): 1 in the last 3600 secs (0-196)
show less
Hacking
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-13 13:42:03
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:41:57.546016 2026] [security2:error] [pid 30717:tid 30723] [client 104.207.39.129:39285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lead-sleds.com"] [uri "/dev/.git/config"] [unique_id "aY8qJczPPGubNVfadE28ZgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 13:00:11
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:00:06.895264 2026] [security2:error] [pid 20817:tid 20817] [client 104.207.39.129:36841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laura-stone.com"] [uri "/.env.save"] [unique_id "aY8gVkX7ZrdIFThxms909gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 07:35:12
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:35:08.390450 2026] [security2:error] [pid 7370:tid 7370] [client 104.207.39.129:21591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mehlerproperties.com"] [uri "/config/.env"] [unique_id "aY7ULM7RtUN9BFE0r5ZVCAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:54:45
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:54:36.858194 2026] [security2:error] [pid 5479:tid 5479] [client 104.207.39.129:9907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "masterfulenlighteningfreestudies.org"] [uri "/.env.save"] [unique_id "aY6ujIZxZPxdi0_zUoCQ8gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:16:53
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:16:43.966450 2026] [security2:error] [pid 29490:tid 29490] [client 104.207.39.129:21195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maleein.com"] [uri "/test/.git/config"] [unique_id "aY6JiyjCrg216zI7zvJXnQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-12 23:00:44
(4 months ago)
Auto-ban: >3000 req/min op 2026-02-12
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-12 19:47:14
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 14:47:05.895660 2026] [security2:error] [pid 1222101:tid 1222129] [client 104.207.39.129:37355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaqa.org"] [uri "/.git/config"] [unique_id "aY4uOZ0IlbWkChRIkdStYQAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 17:44:03
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:43:58.978405 2026] [security2:error] [pid 22817:tid 22817] [client 104.207.39.129:60025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digifonics.com"] [uri "/.env"] [unique_id "aY4RXj4mfBGTyN2KFcWZ9AAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 15:53:23
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 10:53:20.024717 2026] [security2:error] [pid 21881:tid 21881] [client 104.207.39.129:34915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertvacationvillas.com"] [uri "/.git/config"] [unique_id "aY33cO_XPxTUi4eYbp75-AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 06:18:37
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 01:18:33.296814 2026] [security2:error] [pid 7682:tid 7682] [client 104.207.39.129:16405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "g-peopleland.com"] [uri "/test/.git/config"] [unique_id "aYwfOVLgQGIpPZhxhPJvdAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack