🇺🇸
TPI-Abuse
2026-06-06 10:49:40
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 06:49:13.104090 2026] [security2:error] [pid 16410:tid 16410] [client 104.207.51.53:61103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.trafficstopper.com"] [uri "/.env"] [unique_id "aiP7KST17gVZKLH6POoocwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2026-01-08 22:29:56
(4 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/8/2026 10:29 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-07 18:44:22
(4 months ago)
WP Login Scan Activities
Web App Attack
2025-12-30 20:36:14
(5 months ago)
"GET /.git/HEAD HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 11:15:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:15:47.249017 2025] [security2:error] [pid 2303:tid 2303] [client 104.207.51.53:26127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "strawberryhillchristmas.com"] [uri "/.env"] [unique_id "aVJi4-e1BBQj0Xmc9ZmA3AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 08:50:41
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:50:33.642932 2025] [security2:error] [pid 6850:tid 6850] [client 104.207.51.53:54251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "captainquirks.com"] [uri "/.svn/wc.db"] [unique_id "aVJA2dEUC_rrtvgbizfWmgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 08:32:43
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:32:35.815729 2025] [security2:error] [pid 31108:tid 31108] [client 104.207.51.53:24941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centerofhopefl.com"] [uri "/.svn/wc.db"] [unique_id "aVI8o7hDIKZ4-AnnN0LXXwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:38:21
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:38:15.377489 2025] [security2:error] [pid 30860:tid 30860] [client 104.207.51.53:49677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indiahouseportland.com"] [uri "/.git/HEAD"] [unique_id "aVIh1_mHByrMB41ompS7mgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-11 07:20:32
(5 months ago)
WP Login Scan Activities
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:48:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:48:52.204551 2025] [security2:error] [pid 9541:tid 9541] [client 104.207.51.53:38737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kippert.com"] [uri "/.env"] [unique_id "aS5vtEMwqd37jeGvEAcUvwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 03:06:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 22:06:22.133389 2025] [security2:error] [pid 2847:tid 2847] [client 104.207.51.53:9817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notarialota.cl"] [uri "/.svn/wc.db"] [unique_id "aS5XrujpYeG-VxHs8SN-vwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 01:19:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 20:19:41.046047 2025] [security2:error] [pid 2553:tid 2553] [client 104.207.51.53:46219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neneh.biz"] [uri "/.git/HEAD"] [unique_id "aS4-rfenp1IdxiaS-l-MRwAAAH0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2025-12-02 00:57:31
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-11-30 23:12:14
(6 months ago)
WP Login Scan Activities
Web App Attack
2025-11-27 12:15:19
(6 months ago)
Attempted brute force login to web vpn 198 time(s); last attempt for 2025.11.27 is noted in report t ...
show more
Attempted brute force login to web vpn 198 time(s); last attempt for 2025.11.27 is noted in report timestamp
show less
Hacking
Brute-Force