🇺🇸
mnsf
2026-06-04 19:07:32
(3 days ago)
Abuse Detected (2)
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-05-21 05:08:33
(2 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-08.104.207.44.79.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-08.104.207.44.79.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2026-05-21 02:23:27
(2 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-23.104.207.44.79.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-23.104.207.44.79.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇸🇪
KIDOS
2026-05-12 09:24:05
(3 weeks ago)
malicious activity
Web App Attack
2026-04-27 02:44:34
(1 month ago)
Forum/form spam
Web Spam
2026-03-13 22:06:59
(2 months ago)
Forum/form spam
Web Spam
🇮🇹
VHosting
2026-02-04 18:15:06
(4 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇲🇹
Malta
2026-01-27 15:26:41
(4 months ago)
104.207.44.79 - - [27/Jan/2026:16:26:41 +0100] "POST /xmlrpc.php HTTP/1.1" "PHP/6.3.63"
VPN IP
Hacking
Web App Attack
2025-12-23 19:25:53
(5 months ago)
wordpress-trap
Web App Attack
🇬🇧
openstrike.co.uk
2025-12-11 09:16:51
(5 months ago)
9 packets to port 2083
Port Scan
🇺🇸
TPI-Abuse
2025-12-02 19:46:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.79 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:46:29.261645 2025] [security2:error] [pid 3486:tid 3499] [client 104.207.44.79:43965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seanmeriwether.com"] [uri "/.env"] [unique_id "aS9CFcVxrFuHP1qkq9WbMgAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 10:02:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.79 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 05:02:32.968479 2025] [security2:error] [pid 12260:tid 12260] [client 104.207.44.79:23593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backyardbrickoven.com"] [uri "/.svn/wc.db"] [unique_id "aS65OIY-PZkRr1o0KoRcJAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 06:08:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.79 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:08:51.591654 2025] [security2:error] [pid 14151:tid 14151] [client 104.207.44.79:38249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ubuciko.com"] [uri "/.env"] [unique_id "aS6CcxY9cm-hOA8J7CRNUQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:12:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.79 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:12:19.864035 2025] [security2:error] [pid 360:tid 360] [client 104.207.44.79:18881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "helstone.com"] [uri "/.svn/wc.db"] [unique_id "aS51M1oj0tit-fuPncz3MAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-25 22:59:23
(6 months ago)
Auto-ban: >3000 req/min op 2025-11-25
Hacking
Web App Attack
SSH