🇦🇺
2000cn.com.au
2026-02-11 21:04:51
(4 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:19:03
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:18:56.139239 2026] [security2:error] [pid 18289:tid 18289] [client 104.207.49.67:26041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iclog.us"] [uri "/.git/config"] [unique_id "aYqxsBoHjq9lfCDJkHXY8AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:44:56
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:44:52.265927 2026] [security2:error] [pid 9765:tid 9765] [client 104.207.49.67:39065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibiocat.com"] [uri "/app/.git/config"] [unique_id "aYqptOmkHORWiCzS55JAGwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:23:56
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:23:49.162617 2026] [security2:error] [pid 27897:tid 27897] [client 104.207.49.67:63577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kircali.net"] [uri "/.env.save"] [unique_id "aYqkxUO3oZJotiPkWvLnnwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-09 23:35:31
(4 months ago)
Blocking for trying to access an exploit file: /backend/.env
Hacking
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:27
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-11-25 05:20:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:20:30.242623 2025] [security2:error] [pid 32425:tid 32425] [client 104.207.49.67:51765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lacycustombuilt.com"] [uri "/.git/HEAD"] [unique_id "aSU8nj_O6Nu-NFEX93BbjAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:39:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:39:10.891799 2025] [security2:error] [pid 20908:tid 20908] [client 104.207.49.67:52067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.evelynkay.com"] [uri "/.env"] [unique_id "aSUy7iknXgRKqW_qxgJ9FAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:49:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:49:04.702134 2025] [security2:error] [pid 12373:tid 12373] [client 104.207.49.67:19267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scomparsa-disappearance.tandm.us"] [uri "/.svn/wc.db"] [unique_id "aSUZINy1pnsGicZ02GU7igAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:29:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:29:36.497890 2025] [security2:error] [pid 6391:tid 6391] [client 104.207.49.67:45679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mtsneffels.com"] [uri "/.svn/wc.db"] [unique_id "aSUUkJrDi_h-b8zmnPPf5wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:12:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:12:01.823514 2025] [security2:error] [pid 4868:tid 4868] [client 104.207.49.67:43687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.heartshapedboy.com"] [uri "/.svn/wc.db"] [unique_id "aSUQcYCbzWw2weWsIlYd7QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:13:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:13:22.739345 2025] [security2:error] [pid 18306:tid 18306] [client 104.207.49.67:14167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ferrarapanfitness.com"] [uri "/.svn/wc.db"] [unique_id "aSUCsmL3JtuDG3CKYe6IyQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-25 01:13:25
(6 months ago)
[25/Nov/2025:12:13:24 +1100] "GET /.env HTTP/1.1" 301 249 "Mozilla/5.0 (Windows NT 10.0; Win64; x64; ...
show more
[25/Nov/2025:12:13:24 +1100] "GET /.env HTTP/1.1" 301 249 "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:35:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:35:48.190692 2025] [security2:error] [pid 11545:tid 11545] [client 104.207.49.67:36315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.69strains.com"] [uri "/.env"] [unique_id "aST55Jgb2m4KXOJaLGke7wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-04-07 13:45:03
(1 year ago)
Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.07 is noted in report tim ...
show more
Attempted brute force login to web vpn 6 time(s); last attempt for 2025.04.07 is noted in report timestamp
show less
Hacking
Brute-Force