2026-04-30 09:50:51
(1 month ago)
Forum/form spam
Web Spam
2026-04-16 10:30:05
(1 month ago)
(ftpd) Failed FTP login from 104.207.44.241 (US/United States/-): 3 in the last 3600 secs
Brute-Force
FTP Brute-Force
🇦🇺
MAGIC
2026-04-03 01:26:45
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-03-27 14:10:52
(2 months ago)
Forum/form spam
Web Spam
2026-03-06 15:20:50
(2 months ago)
Forum/form spam
Web Spam
🇦🇺
MAGIC
2026-02-23 00:42:05
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇳🇱
jjnxpct
2026-02-16 04:55:02
(3 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env.save (Rule ID: 920440) - URL file extension is restricted by policy
show less
Hacking
SQL Injection
Web App Attack
🇫🇷
dynamix
2026-02-15 12:18:47
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:56:15
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:56:12.389043 2026] [security2:error] [pid 11245:tid 11245] [client 104.207.44.241:49255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "serpentstudios.com"] [uri "/app/.env"] [unique_id "aZG0XAMRx9jNGxxLljDf-wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 10:53:40
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 05:53:35.574511 2026] [security2:error] [pid 7055:tid 7055] [client 104.207.44.241:32255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seebeexee.com"] [uri "/.env.staging"] [unique_id "aZGlr0NbKAxw43jRLX-szAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
Adorjan Daczo
2026-02-15 05:40:59
(3 months ago)
Probe for vulnerabilities. Path attempted: /admin/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:35:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:35:51.699019 2026] [security2:error] [pid 25628:tid 25628] [client 104.207.44.241:29465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sbiusa.org"] [uri "/api/.git/config"] [unique_id "aZFbN0BmM6kmb0IVFpwzBgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ne1for23
2026-02-15 05:07:28
(3 months ago)
Attempting to probe for sensitive information accidently exposed via git config.
104.207.44.241 - - ...
show more
Attempting to probe for sensitive information accidently exposed via git config.
104.207.44.241 - - [15/Feb/2026:05:06:54 +0000] "GET /dev/.git/config HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Hacking
🇺🇸
TPI-Abuse
2026-02-15 04:17:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:17:42.279487 2026] [security2:error] [pid 271396:tid 271396] [client 104.207.44.241:20247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nsightsound.com"] [uri "/admin/.git/config"] [unique_id "aZFI5jOZ_MltoLHku6mzHQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
InVertebrado
2026-02-15 04:03:52
(3 months ago)
104.207.44.241 - - [15/Feb/2026:05:03:50 +0100] "GET /wp/.git/config HTTP/1.1" 404 3291 "-" "Mozilla ...
show more
104.207.44.241 - - [15/Feb/2026:05:03:50 +0100] "GET /wp/.git/config HTTP/1.1" 404 3291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
104.207.44.241 - - [15/Feb/2026:05:03:51 +0100] "GET /test/.git/config HTTP/1.1" 404 663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
104.207.44.241 - - [15/Feb/2026:05:03:51 +0100] "GET /app/.git/config HTTP/1.1" 404 663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack