🇺🇸
oncord
2026-03-12 10:23:29
(3 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-20 11:51:38
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 06:51:34.684504 2026] [security2:error] [pid 18387:tid 18387] [client 104.207.41.175:23019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||portraitsinblues.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "portraitsinblues.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZhKxnLym-J6kyOVD2tHcwAAABk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-02-18 04:14:46
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-14 17:11:58
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-11 02:14:05
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-06 15:28:01
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-01-31 22:27:04
(4 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-12-02 19:44:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:44:53.387052 2025] [security2:error] [pid 26750:tid 26750] [client 104.207.41.175:42109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toybud.com"] [uri "/.svn/wc.db"] [unique_id "aS9BtTw3lI0TGVvfxaDnUwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:23:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:22:57.414229 2025] [security2:error] [pid 26399:tid 26407] [client 104.207.41.175:34081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pizzadlux.com"] [uri "/.env"] [unique_id "aS53sUhlTJHE6APNwDEncAAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:02:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:02:02.889651 2025] [security2:error] [pid 22167:tid 22167] [client 104.207.41.175:38495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frameandsavehydepark.com"] [uri "/.env"] [unique_id "aS5yynloTq-EehK4ecAySAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2025-12-02 00:57:58
(6 months ago)
/.aws/credentials
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:04:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:04:33.707526 2025] [security2:error] [pid 27320:tid 27320] [client 104.207.41.175:12403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "famagustacyprus.eu"] [uri "/.env"] [unique_id "aSVVARVoAmuwJT5lUXNGjgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:32:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:32:27.665539 2025] [security2:error] [pid 23436:tid 23436] [client 104.207.41.175:17759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vittariafashion.vittariadesign.com"] [uri "/.svn/wc.db"] [unique_id "aSVNewTyE8AgEn0QnI2vdAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:58:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:58:11.029749 2025] [security2:error] [pid 15331:tid 15331] [client 104.207.41.175:54531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.railfanfromseo.com"] [uri "/.env"] [unique_id "aSQQE8uC7kn5a6qTI5LR2AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:39:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:39:39.346957 2025] [security2:error] [pid 23663:tid 23663] [client 104.207.41.175:34783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kaneprotectivecoatings.com"] [uri "/.git/HEAD"] [unique_id "aSPvm_BK_AAM_cyGpUggHgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack