🇪🇸
librebit
2026-05-17 05:46:54
(3 weeks ago)
Brute force
Brute-Force
2026-04-03 06:15:20
(2 months ago)
Forum/form spam
Web Spam
🇦🇺
MAGIC
2026-03-13 02:22:42
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
oncord
2026-02-20 22:39:06
(3 months ago)
Form spam
Web Spam
🇦🇺
MAGIC
2026-01-19 02:14:20
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:02:02
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-11-25 04:55:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:55:04.739762 2025] [security2:error] [pid 4228:tid 4228] [client 104.207.41.232:58723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.therennas.com"] [uri "/.env"] [unique_id "aSU2qEG85UJSj_LQ8RpMswAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:57:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:57:16.948138 2025] [security2:error] [pid 32040:tid 32040] [client 104.207.41.232:48439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sebog.org"] [uri "/.git/HEAD"] [unique_id "aSUpHOwJbsIsPiZq3tiV2gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:41:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:41:45.472405 2025] [security2:error] [pid 6103:tid 6103] [client 104.207.41.232:51251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.iecki.com"] [uri "/.svn/wc.db"] [unique_id "aSUXaUYynftPahBvhPE7vAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:13:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:13:27.049610 2025] [security2:error] [pid 4330:tid 4330] [client 104.207.41.232:39137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.yeejia.net"] [uri "/.env"] [unique_id "aSUQx8-EKQqVEgPmEFF7bgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:36:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.41.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:36:27.538911 2025] [security2:error] [pid 27398:tid 27398] [client 104.207.41.232:50001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sideralis.mx"] [uri "/.env"] [unique_id "aSUIG6wtIisw_w1mN0n0WAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 17:46:30
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
techboy117
2025-11-14 00:06:07
(6 months ago)
Blocking due to password spraying.
Brute-Force
2025-11-01 22:35:07
(7 months ago)
[redacted] 104.207.41.232 - - [01/Nov/2025:23:34:51 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" " ...
show more
[redacted] 104.207.41.232 - - [01/Nov/2025:23:34:51 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Android 6.0.1; Mobile; rv:54.0) Gecko/54.0 Firefox/54.0"
[redacted] 104.207.41.232 - - [01/Nov/2025:23:34:53 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.11) Gecko/20070312 Firefox/1.5.0.11"
[redacted] 104.207.41.232 - - [01/Nov/2025:23:34:54 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.1 Safari/605.1.15"
[redacted] 104.207.41.232 - - [01/Nov/2025:23:34:57 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; InfoPath.2)"
[redacted] 104.207.41.232 - - [01/Nov/2025:23:34:58 +0100] "POST /xmlrpc.php HTTP
...
show less
Hacking
Web App Attack
2025-10-30 15:14:02
(7 months ago)
WordPress Brute Force
Brute-Force