🇳🇱
jjnxpct
2026-03-29 03:48:38
(2 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /nl/component/avendre/blog (Rule ID: 942540) - SQL Authentication bypass (split query) [Suspicious: 101'; found within ARGS:Itemid: 101';]
show less
Web App Attack
SQL Injection
Brute-Force
🇳🇱
Savvii
2026-03-28 18:59:26
(2 months ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-03-28 12:37:54
(2 months ago)
20 attempts against mh_ha-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
myagent.site
2026-02-09 22:10:52
(4 months ago)
Blocking for trying to access an exploit file: /dev/.git/config
Hacking
🇧🇾
lns.bz
2026-02-09 21:04:29
(4 months ago)
.env scanning [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 19:47:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:47:34.855837 2026] [security2:error] [pid 717735:tid 717759] [client 104.207.44.211:29273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gafm.org"] [uri "/.env.staging"] [unique_id "aYo51le2saaLoPBOZVo6nwAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 08:27:12
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 03:27:02.913824 2026] [security2:error] [pid 17930:tid 17930] [client 104.207.44.211:56761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fydelitybags.com"] [uri "/.env.production"] [unique_id "aYmaVsSMfhNhhl7WOyIwmgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
pixelboost.kr
2026-02-04 09:53:32
(4 months ago)
104.207.44.211 - - [04/Feb/2026:18:53:31 +0900] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iP ...
show more
104.207.44.211 - - [04/Feb/2026:18:53:31 +0900] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
F242
2026-01-30 06:03:41
(4 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇺🇸
TPI-Abuse
2026-01-21 02:30:28
(5 months ago)
(mod_security) mod_security (id:211540) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211540) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 21:30:19.029465 2026] [security2:error] [pid 31072:tid 31072] [client 104.207.44.211:52923] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||al-ketab.net|F|2"] [data "Matched Data: substr found within REQUEST_URI: /alketab/include/serveralketab.html?'+window.location.search.substr(1)+'"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "al-ketab.net"] [uri "/alketab/include/serveralketab.html"] [unique_id "aXA6O8RnhvdFf9hcS5J0FAAAAA4"], referer: http://al-ketab.net
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:07:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:07:08.119980 2025] [security2:error] [pid 27552:tid 27552] [client 104.207.44.211:27155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bhsp.org"] [uri "/.svn/wc.db"] [unique_id "aSbRTGRLkm_tWj4aba9NqgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:48:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:48:31.790016 2025] [security2:error] [pid 8110:tid 8110] [client 104.207.44.211:46491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lodge84.org"] [uri "/.git/HEAD"] [unique_id "aSaUr0-rqiLY7eiaoqH-_gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:50:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:50:45.170931 2025] [security2:error] [pid 2273977:tid 2273977] [client 104.207.44.211:11901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.salsberggroup.com"] [uri "/.svn/wc.db"] [unique_id "aSZrBa00ZdVIJTXd0KWPdgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:07:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:07:09.132716 2025] [security2:error] [pid 3365543:tid 3365668] [client 104.207.44.211:58973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.philipjnielsen-drafting-design.com"] [uri "/.git/HEAD"] [unique_id "aSZgzWzJ-U6IElkF6xNgagAAAdM"]
show less
Brute-Force
Bad Web Bot
Web App Attack