🇦🇺
oncord
2026-03-03 01:30:28
(3 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-18 03:47:22
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:47:17.025049 2026] [security2:error] [pid 23334:tid 23349] [client 104.207.45.153:53603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertbellamystudio.com"] [uri "/config/.env"] [unique_id "aZU2Rdqy-M8LswHioBN5XgAAAUo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-02-18 02:10:22
(3 months ago)
http-sensitive-files - IP: 104.207.45.153 - time="2026-02-18T03:10:22+01:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 104.207.45.153 - time="2026-02-18T03:10:22+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.45.153 (US/200373) : 4h ban on Ip 104.207.45.153" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 01:07:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 20:07:50.769776 2026] [security2:error] [pid 25194:tid 25258] [client 104.207.45.153:21185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peapage.com"] [uri "/.env"] [unique_id "aZUQ5t8jwU-hbcTM2pSxZQAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 00:47:52
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:47:45.437194 2026] [security2:error] [pid 23920:tid 23920] [client 104.207.45.153:37721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulbihn.com"] [uri "/.env"] [unique_id "aZUMMZlWPr-hqqeU55OaKwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-16 03:05:16
(3 months ago)
Too many Status 40X (12)
Scanning/Probing (15)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 12:04:36
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:04:31.589993 2026] [security2:error] [pid 2809265:tid 2809265] [client 104.207.45.153:30535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tigerpathteam.org"] [uri "/.env.save"] [unique_id "aZG2TzeuyaWgurdNGQdvOQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:56:52
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:56:49.069829 2026] [security2:error] [pid 6187:tid 6195] [client 104.207.45.153:55567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swizzlestick.com"] [uri "/.env.staging"] [unique_id "aZFgIS7C2hm1R_Ut717o-wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:34:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:34:55.944001 2026] [security2:error] [pid 23199:tid 23199] [client 104.207.45.153:16815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "susansambou.org"] [uri "/v2/.git/config"] [unique_id "aZFa_2CUyhMT6acrbw-EHQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:06:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:05:59.949179 2026] [security2:error] [pid 15801:tid 15801] [client 104.207.45.153:17543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stablechase.com"] [uri "/new/.git/config"] [unique_id "aZE4F5wvxKbAJy5_aN1rKQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 02:37:07
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:37:01.569156 2026] [security2:error] [pid 250824:tid 250870] [client 104.207.45.153:49237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n2play.net"] [uri "/config/.env"] [unique_id "aZExTbzgCarsQLWpGm2FTAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 02:11:28
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:11:24.035769 2026] [security2:error] [pid 12629:tid 12629] [client 104.207.45.153:48381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sparkleluminous.com"] [uri "/wp/.git/config"] [unique_id "aZErTMULTw76KPwjD_oVmQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-15 02:05:25
(3 months ago)
Too many Status 40X (11)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇫🇮
oh.mg
2026-02-15 00:52:31
(3 months ago)
[Sun Feb 15 01:52:30.593669 2026] [security2:error] [pid 601510:tid 601524] [client 104.207.45.153:4 ...
show more
[Sun Feb 15 01:52:30.593669 2026] [security2:error] [pid 601510:tid 601524] [client 104.207.45.153:45487] [client 104.207.45.153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mrman.info"] [uri "/.env"] [unique_id "aZEYzopFoyNi8-JdO-0V0wAAAEk"]
[Sun Feb 15 01:52:30.791263 2026] [security2:error] [pid 601510:tid 601520] [client 104.207.45.153:45487] [client 104.207.45.153] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "ano
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 00:50:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:50:51.738537 2026] [security2:error] [pid 12089:tid 12089] [client 104.207.45.153:39823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrccertification.com"] [uri "/admin/.git/config"] [unique_id "aZEYa_bP2ngGbC3UqexZJgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack