2026-05-01 11:40:02
(1 month ago)
suspicious request in access.log
Web App Attack
🇩🇪
bryth
2026-04-29 12:13:02
(1 month ago)
Wordpress login/xmlrpc abuse (Wed Apr 29 11:56:26 AM UTC 2026)
Hacking
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇵🇹
Information Security
2026-03-20 12:49:34
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:55
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-11-27 08:23:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 03:23:38.427726 2025] [security2:error] [pid 23387:tid 23387] [client 104.207.50.210:35993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.fundaciondamashcc.org.ec"] [uri "/.svn/wc.db"] [unique_id "aSgKil9qx1cfy0tFSNdtlwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 17:13:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 12:13:40.859792 2025] [security2:error] [pid 5719:tid 5719] [client 104.207.50.210:32679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.aarce.me"] [uri "/.env"] [unique_id "aSc1RHYb7xcL4yvIK_i_4QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 16:42:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 11:42:24.854829 2025] [security2:error] [pid 30911:tid 30911] [client 104.207.50.210:16613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.delicatessefoods.com"] [uri "/.git/HEAD"] [unique_id "aSct8HjX30aKsllGeJmLpgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:29:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:29:38.265208 2025] [security2:error] [pid 3738194:tid 3738251] [client 104.207.50.210:27827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.soulconjecture.com"] [uri "/.env"] [unique_id "aSbIgu4rPrCkg_k23hOMXQAAAg4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:01:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:01:11.299351 2025] [security2:error] [pid 12901:tid 12901] [client 104.207.50.210:17601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.albuquerquelimobus.com"] [uri "/.env"] [unique_id "aSVUNziw5vE2wG1XYytZPAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:03:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:03:32.509513 2025] [security2:error] [pid 14322:tid 14322] [client 104.207.50.210:13955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lyldevelopers.com"] [uri "/.env"] [unique_id "aSVGtI2MI99nDsZJnuzHRQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:00:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:00:32.235326 2025] [security2:error] [pid 7281:tid 7281] [client 104.207.50.210:51043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.endicottmedia.com"] [uri "/.git/HEAD"] [unique_id "aSU38NHXSvS2IxikbtHfPQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:15:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:15:02.844194 2025] [security2:error] [pid 15168:tid 15168] [client 104.207.50.210:55107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.swpppcal.com"] [uri "/.svn/wc.db"] [unique_id "aSUtRpW-zijrlXvZD8n-7AAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:49:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:49:21.837358 2025] [security2:error] [pid 32390:tid 32390] [client 104.207.50.210:40395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.beautyradio.com"] [uri "/.git/HEAD"] [unique_id "aSUnQeJRlWlKS3cViATSkAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:17:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:17:19.385402 2025] [security2:error] [pid 9197:tid 9197] [client 104.207.50.210:18881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hshr.com"] [uri "/.env"] [unique_id "aSUfv0_xhI0DLzgmnOmIZQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack