🇺🇸
mnsf
2026-06-04 16:06:08
(18 hours ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:55:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:55:16.127436 2026] [security2:error] [pid 9894:tid 9894] [client 104.207.49.99:27387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamanchaorchards.com"] [uri "/admin/.env"] [unique_id "aY7m9BreA1SbAHOHDlqaBAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:29:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:29:16.222751 2026] [security2:error] [pid 24548:tid 24548] [client 104.207.49.99:20453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laecovillage.org"] [uri "/.env"] [unique_id "aY7g3BQ6nXVhhVX3WvPTNAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-02-13 08:04:45
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:30:12
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:30:09.292688 2026] [security2:error] [pid 23057:tid 23057] [client 104.207.49.99:43073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakenseattle.org"] [uri "/backup/.git/config"] [unique_id "aY7E8bNBNyUZLtEJVZAMxwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-13 06:05:32
(3 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 03:26:38
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:26:34.487757 2026] [security2:error] [pid 9310:tid 9310] [client 104.207.49.99:25591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khtcpl.com"] [uri "/test/.git/config"] [unique_id "aY6Z6ntdtCWqpCc2O_ZUMAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:58:59
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:58:51.091614 2026] [security2:error] [pid 17743:tid 17743] [client 104.207.49.99:51065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazingthailand.net"] [uri "/.git/config"] [unique_id "aY6Ta9s-prlsblBRMaK6QAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:26:00
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:25:55.092372 2026] [security2:error] [pid 1064873:tid 1064873] [client 104.207.49.99:59805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karturo.com"] [uri "/site/.git/config"] [unique_id "aY59o1TlhEVXto5gZ2iBWAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-13 00:56:08
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.49.99 (BR/Brazil/-): 2 in t ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.49.99 (BR/Brazil/-): 2 in the last 3600 secs
show less
Web App Attack
🇳🇱
jjnxpct
2026-02-12 04:49:10
(3 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /test/.git/config (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 02:58:47
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 21:58:40.388258 2026] [security2:error] [pid 13029:tid 13029] [client 104.207.49.99:11367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corepsychotherapycenter.com"] [uri "/dev/.git/config"] [unique_id "aYvwYIXJFXbcRtSiQIVKowAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 01:50:47
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 20:50:41.241875 2026] [security2:error] [pid 6895:tid 6895] [client 104.207.49.99:22723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coralseasbeach.com"] [uri "/.env"] [unique_id "aYvgcb9vnOx73Yi5fEkjAAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ecode hosting
2026-02-11 01:34:03
(3 months ago)
Domain : ecodehost.com
Rule : config
2026-02-11 01:32:41 10.100.1.20 GET /backup/.git/config - 443 - ...
show more
Domain : ecodehost.com
Rule : config
2026-02-11 01:32:41 10.100.1.20 GET /backup/.git/config - 443 - 104.207.49.99 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 - ecodehost.com 404 8 0 1396 168 167 - -
show less
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-02-10 03:53:02
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:52:59.239181 2026] [security2:error] [pid 16824:tid 16824] [client 104.207.49.99:49249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gerrytolentino.net"] [uri "/new/.git/config"] [unique_id "aYqrm-FVIqKLDa39h-w2MQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack