🇺🇸
oncord
2026-05-02 04:53:37
(1 month ago)
Form spam
Web Spam
🇩🇪
4server
2026-04-21 14:15:16
(1 month ago)
[TueApr2116:15:10.2755162026][security2:error][pid3025238:tid3025254][client104.207.45.234:0]ModSecu ...
show more
[TueApr2116:15:10.2755162026][security2:error][pid3025238:tid3025254][client104.207.45.234:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpfacilityservices.ch\"][uri\"/backup.sql\"][unique_id\"aeeGbprE_IcxiUza34QgywAAAAY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
Carsten
2026-04-21 02:01:50
(1 month ago)
GET [dump.sql]
Port Scan
🇬🇧
Oakley
2026-04-17 21:00:09
(1 month ago)
(antiscrape_rule) Web application abuse detected 104.207.45.234 (US/United States/-): 5 in the last ...
show more
(antiscrape_rule) Web application abuse detected 104.207.45.234 (US/United States/-): 5 in the last 900 secs
show less
Hacking
2026-04-14 07:05:05
(1 month ago)
Blocked: Reason='Possible SQL injection activity (129/60 min)'; Requests=129
SQL Injection
🇪🇸
librebit
2026-04-08 07:30:43
(2 months ago)
Brute force
Brute-Force
🇬🇧
CDN
2026-03-15 07:51:33
(2 months ago)
Path traversal: 'alumni'=>false\
SQL Injection
🇮🇹
VHosting
2026-01-20 11:25:03
(4 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-12-20 16:20:08
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇨🇭
backslash
2025-12-19 18:40:04
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-12-07 23:44:20
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-24 09:04:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:03:58.656464 2025] [security2:error] [pid 20317:tid 20317] [client 104.207.45.234:14487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.onlineteacher.info"] [uri "/.svn/wc.db"] [unique_id "aSQffs6AaQ-TQBpWGQK_OwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:29:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:29:45.323473 2025] [security2:error] [pid 8989:tid 8989] [client 104.207.45.234:12263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gpahomeinspections.com"] [uri "/.svn/wc.db"] [unique_id "aSQXeUBaCSdRmvqSNboBcQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:00:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:59:31.951955 2025] [security2:error] [pid 24103:tid 24103] [client 104.207.45.234:41273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.stonesandbones.net"] [uri "/.git/HEAD"] [unique_id "aSP0Q-LVwI4B8TAQmcmWpAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:05:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:05:39.059606 2025] [security2:error] [pid 30219:tid 30219] [client 104.207.45.234:24415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.purelywhimsical.com"] [uri "/.svn/wc.db"] [unique_id "aSPZk7yiQBqnuMptINx8PQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack