2026-04-11 01:03:53
(1 month ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-23 20:18:49
(3 months ago)
(mod_security) mod_security (id:210410) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210410) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:18:41.401722 2026] [security2:error] [pid 25104:tid 25104] [client 104.207.40.72:36197] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:services outside range: 1-255. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||amoriotech.com|F|3"] [data "ARGS:services=\\x00Inventory, Invoicing & Payroll Software"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "amoriotech.com"] [uri "/contact"] [unique_id "aZy2IS1fZ4mB9rriBsmmMgAAAA4"], referer: https://amoriotech.com/contact
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 08:12:14
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 03:12:07.072380 2026] [security2:error] [pid 7138:tid 7138] [client 104.207.40.72:12531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cobbwebb.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cobbwebb.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgXV1zitQ2yBrNU1e2ergAAABo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-08 17:43:33
(3 months ago)
Forum/form spam
Web Spam
🇺🇸
fbarela
2026-01-24 22:01:11
(4 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:49
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-11-27 10:23:07
(6 months ago)
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.27 is noted in report ti ...
show more
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.27 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-11-26 05:33:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:33:15.824586 2025] [security2:error] [pid 20885:tid 20885] [client 104.207.40.72:50405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mccompu.com"] [uri "/.svn/wc.db"] [unique_id "aSaRG0SpLdfDS77Yn9Fa6gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:57:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:57:36.818108 2025] [security2:error] [pid 4688:tid 4688] [client 104.207.40.72:11403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rygg.biz"] [uri "/.svn/wc.db"] [unique_id "aSZsoCQvQIELWmZqexnKuAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:33:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:33:19.016785 2025] [security2:error] [pid 28969:tid 28969] [client 104.207.40.72:26341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ji-technovation.com"] [uri "/.svn/wc.db"] [unique_id "aSZm76J36cL-TXWCkZVXEAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:32:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:32:40.514986 2025] [security2:error] [pid 9979:tid 9979] [client 104.207.40.72:20881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jspd.com"] [uri "/.svn/wc.db"] [unique_id "aSZYuM3DWDSIiScjgpgzZAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:08:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:08:42.677393 2025] [security2:error] [pid 796:tid 818] [client 104.207.40.72:16155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.saemed.com"] [uri "/.env"] [unique_id "aSZFCmDqscUuVqQ0-sw_lAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2025-11-25 04:54:03
(6 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.svn/wc.db (Rule ID: 920440) - URL file extension is restricted by policy
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:27:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:27:41.757015 2025] [security2:error] [pid 27539:tid 27539] [client 104.207.40.72:48637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.iclog.us"] [uri "/.env"] [unique_id "aSQlDROF7e8hxUCZck72SgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2025-11-23 18:45:47
(6 months ago)
(From [email protected] ) Are you searching for a job that can be done right away? If so, c ...
show more
(From [email protected] ) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided.
Click here to complete your application if you are interested.
-----> https://themoneyfromhome.com
show less
Phishing
Web Spam