🇹🇷
rtbh.com.tr
2026-02-20 20:11:39
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇨🇭
Origon
2026-02-19 03:59:04
(3 months ago)
http-sensitive-files - IP: 104.207.50.183 - time="2026-02-19T04:59:04+01:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 104.207.50.183 - time="2026-02-19T04:59:04+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.50.183 (GB/200373) : 4h ban on Ip 104.207.50.183" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 03:55:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:55:49.269097 2026] [security2:error] [pid 6058:tid 6058] [client 104.207.50.183:24145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinkycouple4u.com"] [uri "/.env.save"] [unique_id "aZaJxXdDXftzJq9V2iLePwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 02:57:39
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:57:30.899633 2026] [security2:error] [pid 11081:tid 11081] [client 104.207.50.183:22925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ken-parker.com"] [uri "/.env.production"] [unique_id "aZZ8GllfhcnaKQ4RDsxBRQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-02-18 22:33:46
(3 months ago)
104.207.50.183 - - [19/Feb/2026:00:33:44 +0200] "GET /admin/.env HTTP/1.1" 404 326 "-" "Mozilla/5.0 ...
show more
104.207.50.183 - - [19/Feb/2026:00:33:44 +0200] "GET /admin/.env HTTP/1.1" 404 326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
104.207.50.183 - - [19/Feb/2026:00:33:46 +0200] "GET /app/.env HTTP/1.1" 404 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 21:56:46
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 16:56:38.958229 2026] [security2:error] [pid 8793:tid 8793] [client 104.207.50.183:11301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uniquelaos.com"] [uri "/.env"] [unique_id "aZY1ljSfEd3aKPBejf1KfgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 21:00:10
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 16:00:01.649210 2026] [security2:error] [pid 29636:tid 29636] [client 104.207.50.183:12311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tt-w.com"] [uri "/.env.production"] [unique_id "aZYoUetZzYndyaKSiaFe_QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:40:27
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:40:22.993840 2026] [security2:error] [pid 16710:tid 16710] [client 104.207.50.183:35811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thinkerblox.com"] [uri "/app/.env"] [unique_id "aZYHloqEX3H6kacd2SP04gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-18 16:16:50
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.207.50.183 (GB/United Kingdom/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.207.50.183 (GB/United Kingdom/-): 2 in the last 3600 secs
show less
Web App Attack
🇺🇸
mnsf
2026-02-18 14:06:05
(3 months ago)
Scanning/Probing (23)
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2026-02-18 13:20:14
(3 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 12:06:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:06:33.735600 2026] [security2:error] [pid 17198:tid 17198] [client 104.207.50.183:27071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watonga.com"] [uri "/app/.git/config"] [unique_id "aZWrSctYFQdZsctYGM-XiQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 03:39:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:39:48.577170 2026] [security2:error] [pid 146210:tid 146235] [client 104.207.50.183:24937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rmoeis.com"] [uri "/v2/.git/config"] [unique_id "aZU0hCTnLl13hteBk13EMwAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:03:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:03:38.687913 2025] [security2:error] [pid 20245:tid 20245] [client 104.207.50.183:27493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cayman-islands-real-estate.com"] [uri "/.svn/wc.db"] [unique_id "aVIZukOiRes82P3H6oGO9wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 03:29:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:29:14.323723 2025] [security2:error] [pid 19534:tid 19534] [client 104.207.50.183:17633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realestatechristmascard.com"] [uri "/.env"] [unique_id "aVH1isu-2jtN1iprJPdYRgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack