🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-20 09:32:15
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 04:32:08.139311 2026] [security2:error] [pid 5307:tid 5307] [client 104.207.51.41:17665] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cobbwebb.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cobbwebb.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgqGHjViteRpW6r1JrtLgAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 21:19:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:19:48.255992 2025] [security2:error] [pid 20578:tid 20578] [client 104.207.51.41:15171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ekur-art.com"] [uri "/.env"] [unique_id "aSjAdBkrPfpBbU5cRjBL0QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 19:22:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:22:11.089100 2025] [security2:error] [pid 17818:tid 17818] [client 104.207.51.41:57419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arapi.org"] [uri "/.svn/wc.db"] [unique_id "aSik42wQe0AgT2KNlRCs8QAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2025-11-26 16:50:05
(6 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2025-11-25 04:40:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:40:37.349501 2025] [security2:error] [pid 32310:tid 32310] [client 104.207.51.41:40189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thepinman.org"] [uri "/.env"] [unique_id "aSUzRSKnUyIqXcZxGYhl_gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:07:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:07:44.055444 2025] [security2:error] [pid 6325:tid 6325] [client 104.207.51.41:32717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.livesteamtracks.info"] [uri "/.git/HEAD"] [unique_id "aSUrkJDY-8v0eFmxxQ3FLwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:06:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:06:22.384595 2025] [security2:error] [pid 2776:tid 2776] [client 104.207.51.41:20753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.john-bell-associates.com"] [uri "/.svn/wc.db"] [unique_id "aSUPHnDFKkHl1jmuAJ4IyAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:37:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:37:49.782606 2025] [security2:error] [pid 1647141:tid 1647207] [client 104.207.51.41:17703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.e-dome.ne.jp"] [uri "/.git/HEAD"] [unique_id "aSUIbdffCdpZ5cNrCNdVtAAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:49:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:49:14.036479 2025] [security2:error] [pid 5567:tid 5567] [client 104.207.51.41:26349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.donalep.com"] [uri "/.env"] [unique_id "aST9Co1uqsCpFwR-p2bQ3wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2025-11-17 14:41:21
(6 months ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2025-11-13 14:59:56
(6 months ago)
(From [email protected] ) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT
FROM EBOOKS… NO WRITING ...
show more
(From [email protected] ) THE FASTEST WAY TO CREATE, PUBLISH, & PROFIT
FROM EBOOKS… NO WRITING REQUIRED
PROFIT-READY EBOOKS with covers, TOC, chapters, sections, links, images, & content!
https://viewbet-24.site/eBookWriterAI
to UNSUBSCRIBE:
https://viewbet-24.site/unsubscribe?domain=sudoctorahispana.com
Address: 209 West Street Comstock Park, MI 49321
show less
Phishing
Web Spam
🇺🇸
nowyouknow
2025-11-11 17:16:18
(7 months ago)
(From [email protected] ) World's FIRST AI System That Creates PROFITABLE Amazon Books In Under ...
show more
(From [email protected] ) World's FIRST AI System That Creates PROFITABLE Amazon Books In Under 6 Minutes Across 25+ Niches
https://goldsolutions.pro/RoyaltyProfitsAI
to UNSUBSCRIBE:
https://goldsolutions.pro/unsubscribe?domain=desarochiropractic.com
Address: 209 West Street Comstock Park, MI 49321
show less
Phishing
Web Spam
🇫🇷
tr1n
2025-10-26 12:12:59
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
show less
Bad Web Bot
2025-10-11 03:55:33
(8 months ago)
Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report ti ...
show more
Attempted brute force login to web vpn 36 time(s); last attempt for 2025.10.11 is noted in report timestamp
show less
Hacking
Brute-Force