🇦🇺
MAGIC
2026-04-28 02:27:08
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇷
✨
2026-04-22 00:08:22
(1 month ago)
Rule : Security
4 System %592 104.207.45.199 49785 ***hidden-privacy*** 443 6 187920474 %610 44
Port Scan
Hacking
Brute-Force
🇨🇿
ptlab
2026-04-05 20:45:23
(2 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
2026-03-25 02:42:02
(2 months ago)
Forum/form spam
Web Spam
🇬🇧
relianoid.com
2026-02-26 18:29:18
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
TPI-Abuse
2026-02-13 07:56:35
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:56:32.150067 2026] [security2:error] [pid 27124:tid 27124] [client 104.207.45.199:51501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "melkanbassil.com"] [uri "/frontend/.env"] [unique_id "aY7ZMGezOjuT4zZ1pSxT7wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 07:34:53
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:34:47.883943 2026] [security2:error] [pid 7373:tid 7373] [client 104.207.45.199:29623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mehlerproperties.com"] [uri "/.env.save"] [unique_id "aY7UF1aQUS95kdbmDLym7gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 05:29:11
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:29:08.679883 2026] [security2:error] [pid 6441:tid 6441] [client 104.207.45.199:60613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mauriciagandara.com"] [uri "/.env.production"] [unique_id "aY62pLfOAIMv5dL65xwciAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-13 04:32:45
(4 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2026-02-13 04:20:45
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:20:41.869238 2026] [security2:error] [pid 12580:tid 12580] [client 104.207.45.199:51655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martaaizenman.com"] [uri "/new/.git/config"] [unique_id "aY6mmcmJuG_XidVzCHEnbAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-13 02:06:28
(4 months ago)
Scanning/Probing (23)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:07:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:07:26.670018 2026] [security2:error] [pid 6331:tid 6331] [client 104.207.45.199:31383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madrigalscripts.com"] [uri "/app/.env"] [unique_id "aY55TiA6Xhskb2fAU5XqigAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-12 22:59:10
(4 months ago)
Auto-ban: >3000 req/min op 2026-02-12
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-12 20:09:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 15:09:21.050973 2026] [security2:error] [pid 15716:tid 15716] [client 104.207.45.199:21003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gildemello.com"] [uri "/.git/config"] [unique_id "aY4zcd12CsGYOTXO9tkg4QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack