🇮🇹
[email protected]
2026-04-18 11:16:59
(2 months ago)
[Sat Apr 18 13:16:59.707434 2026] [authz_core:error] [pid 560720:tid 560777] [remote 104.207.47.199: ...
show more
[Sat Apr 18 13:16:59.707434 2026] [authz_core:error] [pid 560720:tid 560777] [remote 104.207.47.199:41515] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php
...
show less
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-04-18 01:40:14
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.47.199 (US/United States/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 104.207.47.199 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
Hacking
2026-04-12 05:48:10
(2 months ago)
Attempt to scan vulnerabilities
Hacking
🇺🇸
TPI-Abuse
2025-12-10 13:56:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 08:56:38.489902 2025] [security2:error] [pid 1851:tid 1851] [client 104.207.47.199:27621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "d365geek.com"] [uri "/.git/HEAD"] [unique_id "aTl8Fpi93U0NgJUmC6QrswAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-08 06:42:42
(6 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-08 00:26:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 19:26:23.170007 2025] [security2:error] [pid 19291:tid 19291] [client 104.207.47.199:38873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frame-sa.com"] [uri "/.git/HEAD"] [unique_id "aTYbL9ZrOPw3VmwVPiIARAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-07 23:01:52
(6 months ago)
Auto-ban: >3000 req/min op 2025-12-07
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-12-07 12:30:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:30:16.617444 2025] [security2:error] [pid 19297:tid 19297] [client 104.207.47.199:24543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "britishfolk.org"] [uri "/.svn/wc.db"] [unique_id "aTVzWIOomTEc_P0V9GRB5AAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 12:27:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 07:27:00.202730 2025] [security2:error] [pid 8685:tid 8778] [client 104.207.47.199:35881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kiwimagic.net"] [uri "/.svn/wc.db"] [unique_id "aTQhFBKxbUvuXB6ioeu_BAAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 11:56:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:56:14.223399 2025] [security2:error] [pid 22680:tid 22680] [client 104.207.47.199:27919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starrmail.net"] [uri "/.git/HEAD"] [unique_id "aTQZ3l_Y7g3jaCYXZgfIIgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 10:53:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 05:53:06.189290 2025] [security2:error] [pid 8718:tid 8718] [client 104.207.47.199:40669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andrewweigel.name"] [uri "/.git/HEAD"] [unique_id "aTQLEg562q8kBWFt46-5TQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:08:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:08:39.882925 2025] [security2:error] [pid 29627:tid 29627] [client 104.207.47.199:52735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bloodtestinchicago.com"] [uri "/.svn/wc.db"] [unique_id "aTKvJ8mfdee_SHImrUdI_AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 04:01:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:01:23.517508 2025] [security2:error] [pid 2474:tid 2474] [client 104.207.47.199:17435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abcollie.com"] [uri "/.svn/wc.db"] [unique_id "aTJZE1e3xNO6SvGX0PeOWAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 15:34:26
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-11-01 10:53:32
(7 months ago)
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.01 is noted in report ti ...
show more
Attempted brute force login to web vpn 12 time(s); last attempt for 2025.11.01 is noted in report timestamp
show less
Hacking
Brute-Force