🇦🇺
2000cn.com.au
2026-02-11 21:05:00
(3 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 15:32:39
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 10:32:33.598064 2026] [security2:error] [pid 8568:tid 8568] [client 104.207.51.83:41621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestcountryclubs.com"] [uri "/test/.git/config"] [unique_id "aYtPkUp1tSPCiudhKWzwRAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-10 06:36:44
(3 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2026-02-10 05:58:30
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:58:25.181269 2026] [security2:error] [pid 32322:tid 32322] [client 104.207.51.83:56227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iheldt.net"] [uri "/api/.git/config"] [unique_id "aYrJAV6mY1SySVnyi1tMpQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-10 04:31:16
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-02-10 03:38:09
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:38:05.157442 2026] [security2:error] [pid 25765:tid 25765] [client 104.207.51.83:31981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibcnu.com"] [uri "/frontend/.env"] [unique_id "aYqoHXUbTuxVqgH1cGLuTwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 01:31:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:31:15.229949 2026] [security2:error] [pid 1489:tid 1489] [client 104.207.51.83:24523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "husman.es"] [uri "/.git/config"] [unique_id "aYqKY_rbtwR1mOrQjUW3mgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:50:27
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:50:20.031957 2026] [security2:error] [pid 28708:tid 28708] [client 104.207.51.83:30713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keystonestandard.com"] [uri "/admin/.git/config"] [unique_id "aYqAzCvGfaVg4guERMklSAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:30:41
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:30:34.625683 2026] [security2:error] [pid 16565:tid 16591] [client 104.207.51.83:18859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.com"] [uri "/admin/.env"] [unique_id "aYp8KpLZUbR28tGicLRCkwAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-09 22:59:47
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-09
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-09 22:47:59
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:47:51.190889 2026] [security2:error] [pid 17989:tid 17989] [client 104.207.51.83:59455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houstontenemosunproblema.com"] [uri "/admin/.git/config"] [unique_id "aYpkFyRBmLSTsgCAmrvr7gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-19 07:07:39
(6 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
dtorrer
2025-10-29 23:06:20
(7 months ago)
Brute-force general attack.
Brute-Force
🇩🇪
ps-center
2025-10-25 17:10:16
(7 months ago)
MYH: Web Attack POST /wp-login.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
2025-04-06 20:01:12
(1 year ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.04.06 is noted in report timestamp
show less
Hacking
Brute-Force