๐ฉ๐ช
big-cloud.nl
2026-02-19 05:42:11
(4 months ago)
Try to access /app/.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-19 05:27:01
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:26:46.693198 2026] [security2:error] [pid 17211:tid 17211] [client 104.207.46.156:46657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krukgpt.com"] [uri "/.env.local"] [unique_id "aZafFsCjYHhvPHpjKphabwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-02-19 04:31:31
(4 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐บ๐ธ
TPI-Abuse
2026-02-19 04:27:57
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:27:49.789727 2026] [security2:error] [pid 26022:tid 26022] [client 104.207.46.156:24481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmashburn.com"] [uri "/test/.git/config"] [unique_id "aZaRRdVuOei7yVTLZPdXxAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-19 02:51:38
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:51:31.016159 2026] [security2:error] [pid 12944:tid 12944] [client 104.207.46.156:62053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kellermoving.com"] [uri "/.git/config"] [unique_id "aZZ6sxnbQcW8g8OyQ2gp8AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-02-19 00:15:34
(4 months ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-18 20:22:19
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 15:22:13.118118 2026] [security2:error] [pid 17945:tid 17945] [client 104.207.46.156:48487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "treadbox.net"] [uri "/.env.save"] [unique_id "aZYfddz3s5bE2PXBcDOm4AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-18 15:55:16
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 10:55:09.779492 2026] [security2:error] [pid 10195:tid 10195] [client 104.207.46.156:13605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yarbroughfamily.org"] [uri "/admin/.env"] [unique_id "aZXg3R1yKstMjpmjPKYWfwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-18 14:04:16
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 09:04:13.269955 2026] [security2:error] [pid 5623:tid 5623] [client 104.207.46.156:64373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "writebetweenthelines.com"] [uri "/api/.env"] [unique_id "aZXG3bh5CXLXngrta2llrAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-18 13:21:09
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 08:21:04.335794 2026] [security2:error] [pid 4097078:tid 4097078] [client 104.207.46.156:29647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willowgrovemusic.com"] [uri "/app/.git/config"] [unique_id "aZW8wHCwGtOBdGkA-5netgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-18 12:39:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:39:19.428954 2026] [security2:error] [pid 824471:tid 824495] [client 104.207.46.156:56479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wegelin.org"] [uri "/.git/config"] [unique_id "aZWy9zS5wQ7v1dR3K7WF9wAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-18 12:04:53
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:04:46.114024 2026] [security2:error] [pid 1185890:tid 1185890] [client 104.207.46.156:62581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watermarks.info"] [uri "/test/.git/config"] [unique_id "aZWq3rzGtYhxRA6CsiUcFAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-18 11:46:30
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:46:25.910217 2026] [security2:error] [pid 3419:tid 3419] [client 104.207.46.156:38379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "walterceron.com"] [uri "/.env.local"] [unique_id "aZWmkR3uxGKWFBltHtjlQQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-01-07 16:53:03
(5 months ago)
botnet
DDoS Attack
๐ธ๐ช
Johan Finn
2025-11-26 02:16:48
(6 months ago)
malicious activity
Web App Attack