🇺🇸
Epimetheus
2026-05-30 15:16:48
(2 weeks ago)
Unauthorized access attempts:
[GET] /wp-sitemap.xml
UA: Mozilla/5.0
Web App Attack
🇨🇭
backslash
2026-05-23 05:00:16
(3 weeks ago)
Bad Web Bot
🇳🇱
soverin
2026-05-21 21:29:40
(3 weeks ago)
Network scan on port 80
Email Spam
🇮🇩
Burayot
2026-05-12 00:50:31
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.40.210 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.40.210 (US/United States/-): 2 in the last 3600 secs
show less
Web App Attack
🇫🇷
masterguru
2026-04-02 21:12:41
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.210 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.40.210 (US/United States/-): 1 in the last 3600 secs (0-197)
show less
Hacking
🇩🇪
bsoft.de
2026-01-21 02:51:19
(4 months ago)
Blocked because of abusive behavior
DDoS Attack
2025-12-10 21:12:45
(6 months ago)
botnet
DDoS Attack
🇳🇱
homeshowdomain.nl
2025-11-25 23:02:01
(6 months ago)
Auto-ban: >3000 req/min op 2025-11-25
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-25 07:18:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:18:22.897911 2025] [security2:error] [pid 1417:tid 1417] [client 104.207.40.210:35929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.instituteofscience.com"] [uri "/.env"] [unique_id "aSVYPnp_AD-qaZRTrTzXkQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:55:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:55:16.713879 2025] [security2:error] [pid 23296:tid 23296] [client 104.207.40.210:26313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mathewyoung.com"] [uri "/.env"] [unique_id "aSVExH1kcPWoyvorm4ga5AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:11:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:11:03.900629 2025] [security2:error] [pid 4757:tid 4757] [client 104.207.40.210:31015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tanny.com"] [uri "/.env"] [unique_id "aSUsVw8wYNDTkkD1iSoytwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:51:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:51:36.943687 2025] [security2:error] [pid 29905:tid 29905] [client 104.207.40.210:55201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.barrykrueger.com"] [uri "/.git/HEAD"] [unique_id "aSUZuKLyXwsrUWZctXhiRAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:21:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:21:29.879282 2025] [security2:error] [pid 1416450:tid 1416491] [client 104.207.40.210:53861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.robertdanielsllc.com"] [uri "/.svn/wc.db"] [unique_id "aST2iRmCtwcbd8LR7yuH3QAAAYc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:40:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:40:15.834179 2025] [security2:error] [pid 26019:tid 26019] [client 104.207.40.210:50751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kennedysplace.com"] [uri "/.svn/wc.db"] [unique_id "aSQZ70LfHASxdiiwwUTPSAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:27:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:27:50.285664 2025] [security2:error] [pid 29931:tid 29931] [client 104.207.40.210:33463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.aallred.com"] [uri "/.svn/wc.db"] [unique_id "aSQI9r_b4BH1YwzNAfcD6QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack