2026-04-12 06:31:21
(1 month ago)
Attempt to scan vulnerabilities
Hacking
🇩🇰
TransAdvice-Abuse
2025-12-26 06:23:55
(5 months ago)
IRC SPAM/Flood
DDoS Attack
🇮🇩
Burayot
2025-12-11 03:53:42
(5 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.45.191 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.45.191 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 23:50:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 18:50:45.645614 2025] [security2:error] [pid 9059:tid 9059] [client 104.207.45.191:27307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "femdomchatbot.com"] [uri "/.git/HEAD"] [unique_id "aToHVTv3G2tJ7NCxCxtr8QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 00:57:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 19:57:12.087384 2025] [security2:error] [pid 30752:tid 30752] [client 104.207.45.191:24577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casinoaffiliateprogramsonline.com"] [uri "/.env"] [unique_id "aTjFaALc0mWg9oXmUk5MJgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 11:48:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 06:48:22.492515 2025] [security2:error] [pid 9948:tid 9948] [client 104.207.45.191:51639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dudehotsauces.com"] [uri "/.env"] [unique_id "aTgMhsDiq_4-32B5jzz0nAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 19:59:30
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 14:59:26.094004 2025] [security2:error] [pid 931:tid 948] [client 104.207.45.191:46919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "g3-contracting.com"] [uri "/.git/HEAD"] [unique_id "aTcuHgj_v_ONxV4C5v7YTwAAAU4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 15:44:42
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 10:44:34.921784 2025] [security2:error] [pid 14901:tid 14901] [client 104.207.45.191:37133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woahmanatee.com"] [uri "/.env"] [unique_id "aTbyYsgO45AyO4vvuDgIlQAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 12:15:57
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 07:15:54.421704 2025] [security2:error] [pid 11491:tid 11491] [client 104.207.45.191:11459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weroinc.com"] [uri "/.git/HEAD"] [unique_id "aTbBesQ4xs-elHlr75ro5gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 06:09:58
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 01:09:53.124473 2025] [security2:error] [pid 20749:tid 20749] [client 104.207.45.191:28063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willoughbywolf.com"] [uri "/.svn/wc.db"] [unique_id "aTZrsVsXyGlSwim0mt-0-wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 00:00:43
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 19:00:39.566623 2025] [security2:error] [pid 14565:tid 14565] [client 104.207.45.191:16777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roguetechink.com"] [uri "/.git/HEAD"] [unique_id "aTYVJ0u6BfHPZ5KrlUFHgAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2025-12-07 04:54:46
(5 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env]
show less
Hacking
Web App Attack
2025-12-07 00:34:31
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-05 21:09:58
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 16:09:51.814059 2025] [security2:error] [pid 22987:tid 22996] [client 104.207.45.191:45163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seracon.com.ec"] [uri "/.git/HEAD"] [unique_id "aTNKHwIwz6uMBEjbH3c4twAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:33:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:33:36.041140 2025] [security2:error] [pid 5160:tid 5160] [client 104.207.45.191:57763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starsnurses.com"] [uri "/.env"] [unique_id "aTK1AKSyj-V1_-q824VQvAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack