🇳🇱
homeshowdomain.nl
2026-02-19 22:59:24
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-19
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-02-19 05:09:20
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:09:14.257947 2026] [security2:error] [pid 632794:tid 632794] [client 104.207.46.25:23229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kozzmik.stream"] [uri "/backup/.git/config"] [unique_id "aZaa-pkClgFszF8yD-PdugAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 03:56:14
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:56:11.207048 2026] [security2:error] [pid 21625:tid 21625] [client 104.207.46.25:39739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnen.org"] [uri "/config/.env"] [unique_id "aZaJ2_ZRjsLgmmEfEJOd8QAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 03:00:55
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:00:51.173942 2026] [security2:error] [pid 22183:tid 22183] [client 104.207.46.25:29845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kenmalone.com"] [uri "/.env.save"] [unique_id "aZZ84zUOllrBWwo4v08g8wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 20:21:04
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 15:20:56.483252 2026] [security2:error] [pid 17199:tid 17199] [client 104.207.46.25:29481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelto.info"] [uri "/config/.env"] [unique_id "aZYfKD3Eh2b_riU5txjxCgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-18 19:05:13
(3 months ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:47:12
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:47:05.773802 2026] [security2:error] [pid 31938:tid 31938] [client 104.207.46.25:41983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thommesen.net"] [uri "/v2/.git/config"] [unique_id "aZYJKaPtTRmakkP0MBYAqwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:23:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:22:58.390649 2026] [security2:error] [pid 18674:tid 18674] [client 104.207.46.25:22801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thetallships.com"] [uri "/.env.save"] [unique_id "aZYDgh-sUY-bdYYHHQrNpQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-18 18:05:40
(3 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇩🇪
Petros Stefanakis
2026-02-18 15:54:05
(3 months ago)
(mod_security) mod_security triggered on hostname [redacted] 104.207.46.25 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-02-18 12:35:03
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:34:56.116629 2026] [security2:error] [pid 23069:tid 23069] [client 104.207.46.25:9307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weddingcp.com"] [uri "/config/.env"] [unique_id "aZWx8PoUdh950Yg5ODH7ZgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 12:00:17
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.46.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:00:08.569556 2026] [security2:error] [pid 10634:tid 10640] [client 104.207.46.25:13157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wassell.org"] [uri "/.git/config"] [unique_id "aZWpyGroAaWqOq_ZmJvgrwAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-16 08:07:14
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2025-11-29 14:31:32
(6 months ago)
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.29 is noted in report ti ...
show more
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.29 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
mnsf
2025-11-27 10:05:32
(6 months ago)
Too many Status 40X (15)
Brute-Force
Web App Attack