🇩🇪
gadix
2026-03-27 02:12:28
(2 months ago)
[27/Mar/2026:03:12:27.294535 +0100] acXni8gkJVyF-qXvI6ImsAAAAAA 104.207.44.59 56490 127.0.0.1 7081
[ ...
show more
[27/Mar/2026:03:12:27.294535 +0100] acXni8gkJVyF-qXvI6ImsAAAAAA 104.207.44.59 56490 127.0.0.1 7081
[27/Mar/2026:03:12:27.400381 +0100] acXni7oI3xdV4A5lYUbecgAAAAE 104.207.44.59 56496 127.0.0.1 7081
[27/Mar/2026:03:12:27.505981 +0100] acXni-EGsllbwiatGJW5cQAAAAI 104.207.44.59 56500 127.0.0.1 7081
...
show less
Web App Attack
🇳🇱
e.fierstra
2026-03-27 02:01:36
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-03-15 01:12:21
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇧🇪
voormedia
2026-02-25 14:09:55
(3 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 00:24:40
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 19:24:38.106838 2026] [security2:error] [pid 30220:tid 30220] [client 104.207.44.59:44853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestsongs.com"] [uri "/.env.local"] [unique_id "aY0dxsYdsIIFe3WDuT5H6QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 15:33:18
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 10:33:12.307100 2026] [security2:error] [pid 10196:tid 10196] [client 104.207.44.59:59837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestrestaurants.com"] [uri "/api/.git/config"] [unique_id "aYtPuM5Gg_Zd4iAkKe5KWQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 06:23:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 01:23:49.251361 2026] [security2:error] [pid 31486:tid 31496] [client 104.207.44.59:33011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mailporte.com"] [uri "/dev/.git/config"] [unique_id "aYrO9bZc5pGZ4biKDqxvqAAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 06:01:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 01:01:13.652044 2026] [security2:error] [pid 17384:tid 17384] [client 104.207.44.59:47803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koidivision.com"] [uri "/app/.git/config"] [unique_id "aYrJqRacK9AVhcAilu1r-AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:24:36
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:24:30.079297 2026] [security2:error] [pid 2274341:tid 2274341] [client 104.207.44.59:12173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kirbysmw.com"] [uri "/site/.git/config"] [unique_id "aYqk7lSL950BPvIqV8QetAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:16:12
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:16:06.231433 2026] [security2:error] [pid 29086:tid 29086] [client 104.207.44.59:37305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killeramps.com"] [uri "/.env.save"] [unique_id "aYqU5gZLu9yTzhUt10_bCQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:25:16
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:25:12.259470 2026] [security2:error] [pid 824:tid 824] [client 104.207.44.59:12895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hudready.com"] [uri "/.env.save"] [unique_id "aYp66J6-XqSYtOW0mJ1P7gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:59:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:59:50.430416 2026] [security2:error] [pid 18143:tid 18143] [client 104.207.44.59:41023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kennythompson.com"] [uri "/test/.git/config"] [unique_id "aYp09rZwPnM2T01K0UAHHAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-09 22:59:12
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-09
Hacking
Web App Attack
SSH
🇬🇧
poundawebsiteltd
2026-02-09 22:02:16
(3 months ago)
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.44.59 - - [09/Feb/2026:2 ...
show more
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.44.59 - - [09/Feb/2026:22:01:56 +0000] GET /backup/.git/config HTTP/1.1 403 2959 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Web App Attack
🇬🇧
relianoid.com
2026-02-02 23:05:39
(4 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam