🇩🇪
LRob.fr
2026-06-14 19:15:49
(1 week ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
oncord
2026-03-05 12:34:08
(3 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-22 19:17:05
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-09 08:24:34
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-07 10:36:39
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-02 12:09:49
(4 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-01-17 02:23:03
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.105 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 21:22:57.847831 2026] [security2:error] [pid 6747:tid 6747] [client 104.207.51.105:45767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sekelconsulting.com"] [uri "/wp-config.php.a"] [unique_id "aWrygV644iZgfGuKyw4rbQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 19:54:22
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.105 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:54:16.264034 2025] [security2:error] [pid 3279868:tid 3279868] [client 104.207.51.105:38379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "origenial.com"] [uri "/.git/HEAD"] [unique_id "aVA5aJHPc-zIOGKm48DXRQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-26 08:12:43
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.105 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 26 03:12:36.947918 2025] [security2:error] [pid 28787:tid 28787] [client 104.207.51.105:47193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gpobiotech.com"] [uri "/.svn/wc.db"] [unique_id "aU5DdPr2q0YE07S5yFBxcAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-26 03:56:07
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.105 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 22:56:00.025094 2025] [security2:error] [pid 1494467:tid 1494472] [client 104.207.51.105:21419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rawsynergy.com"] [uri "/.git/HEAD"] [unique_id "aU4HUI6VWo55Jhle6XmfzwAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2025-11-08 07:39:05
(7 months ago)
Form spam
Web Spam
🇳🇱
enpepet
2025-11-07 03:24:14
(7 months ago)
GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT ...
show more
GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36 URL:/.env
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
🇩🇪
Bigbear3
2025-10-23 03:00:43
(8 months ago)
Report-by-bigbear3
Brute-Force
SSH
🇺🇸
nowyouknow
2025-10-12 01:49:14
(8 months ago)
Phishing
Web Spam