🇺🇸
mind5t0rm
2026-04-09 21:10:58
(2 months ago)
(XMLRPC) WP XMLPRC Attack 104.207.39.173 (US/United States/-): 3 in the last 3600 secs; Ports: *; Di ...
show more
(XMLRPC) WP XMLPRC Attack 104.207.39.173 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 104.207.39.173 - - [10/Apr/2026:04:10:51 +0700] "POST /xmlrpc.php HTTP/2.0" 403 239 "-" "curl/7.88.1"
104.207.39.173 - - [10/Apr/2026:04:10:52 +0700] "POST /xmlrpc.php HTTP/2.0" 403 239 "-" "Wget/1.21.4"
104.207.39.173 - - [10/Apr/2026:04:10:53 +0700] "POST /xmlrpc.php HTTP/2.0" 403 239 "-" "curl/8.6.0"
show less
Port Scan
🇳🇱
Mangelot Hosting
2026-02-19 03:44:57
(4 months ago)
(modsecurity) srv101 ModSecurity 104.207.39.173 (US/United States/-): 5 in the last 3600 secs; Ports ...
show more
(modsecurity) srv101 ModSecurity 104.207.39.173 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 01:26:41
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:26:32.861344 2026] [security2:error] [pid 19577:tid 19577] [client 104.207.39.173:36125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kampinenlaw.com"] [uri "/test/.git/config"] [unique_id "aZZmyPd36uk3nIpb-3UMKwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 21:02:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 16:02:28.775020 2026] [security2:error] [pid 2492787:tid 2492787] [client 104.207.39.173:21801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ttlatl.com"] [uri "/new/.git/config"] [unique_id "aZYo5GgK7_l-7IncyVukEQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 19:03:01
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 14:02:57.673322 2026] [security2:error] [pid 14119:tid 14125] [client 104.207.39.173:19217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tigerresource.com"] [uri "/api/.git/config"] [unique_id "aZYM4c7LbDS5IjHn1_wlSAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:42:55
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:42:51.685104 2026] [security2:error] [pid 20911:tid 20911] [client 104.207.39.173:30965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thisisaboutscience.com"] [uri "/.env"] [unique_id "aZYIK93JIaHfmuWgSkDJ6QAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-02-18 17:20:09
(4 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 12:36:49
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:36:45.342056 2026] [security2:error] [pid 10277:tid 10277] [client 104.207.39.173:20139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wedeliverstrippers.com"] [uri "/test/.git/config"] [unique_id "aZWyXXa6nObO_C5ojVtaaAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 12:03:22
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:03:17.120103 2026] [security2:error] [pid 1183683:tid 1183683] [client 104.207.39.173:17079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waterarchitecture.com"] [uri "/test/.git/config"] [unique_id "aZWqhZ1zWLR4WWL6GgglgAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-01-06 05:35:26
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.815 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.815 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0
show less
Bad Web Bot
Web App Attack
2025-12-14 11:30:29
(6 months ago)
botnet
DDoS Attack
2025-12-02 09:07:27
(7 months ago)
botnet
DDoS Attack
🇧🇪
madeit
2025-11-04 15:53:32
(8 months ago)
Web App Attack
2025-10-30 14:45:19
(8 months ago)
WordPress Brute Force
Brute-Force
🇩🇪
Marc
2025-10-29 21:21:38
(8 months ago)
Brute-Force