🇳🇱
homeshowdomain.nl
2026-02-13 22:59:37
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-13
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-13 13:26:14
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:26:08.625129 2026] [security2:error] [pid 27436:tid 27436] [client 104.207.52.4:32475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "millcitymakers.com"] [uri "/admin/.env"] [unique_id "aY8mcMYCPDOqFgcZnExWvAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 12:43:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 07:43:27.906358 2026] [security2:error] [pid 7933:tid 7933] [client 104.207.52.4:24697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microscopicpablo.com"] [uri "/.env"] [unique_id "aY8cb61g_1KrjyuXCq0NRgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-02-13 09:08:29
(3 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 07:11:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:10:59.977913 2026] [security2:error] [pid 3561:tid 3561] [client 104.207.52.4:29113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medpact.net"] [uri "/.env"] [unique_id "aY7Og1uskDEuJaldtfvDrgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:12:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:12:14.467228 2026] [security2:error] [pid 2354843:tid 2354843] [client 104.207.52.4:12675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcgmcg.com"] [uri "/backend/.env"] [unique_id "aY7Avvqt2IJn822bnCtLzwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-13 06:02:47
(3 months ago)
PSCSERV WPSCAN 104.207.52.4
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:54:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:54:48.004373 2026] [security2:error] [pid 5490:tid 5490] [client 104.207.52.4:37127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "masterfulenlighteningfreestudies.org"] [uri "/config/.env"] [unique_id "aY6umONYYIfkNnqaEGxeigAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-13 04:41:43
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.207.52.4 (GB/United Kingdom/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.207.52.4 (GB/United Kingdom/-): 1 in the last 3600 secs
show less
Web App Attack
🇫🇷
dynamix
2026-02-13 04:13:28
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 03:41:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:41:50.351995 2026] [security2:error] [pid 3190:tid 3217] [client 104.207.52.4:37551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marinkovich.info"] [uri "/.env.local"] [unique_id "aY6dfvb4CmTCRsawBB7GqQAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DocNetzwerk
2026-02-13 03:24:23
(3 months ago)
(mod_security) mod_security triggered on hostname [redacted] 104.207.52.4 (GB/United Kingdom/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-02-12 15:50:31
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 10:50:24.935788 2026] [security2:error] [pid 4026:tid 4026] [client 104.207.52.4:36735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dennisstokley.com"] [uri "/.git/config"] [unique_id "aY32wCLYEJz1yRzcK1KuGAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 09:13:38
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 04:13:35.423736 2026] [security2:error] [pid 18974:tid 18974] [client 104.207.52.4:29777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaeltv.com"] [uri "/admin/.env"] [unique_id "aYxIPz_jDoKFS_ZnVML4DgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 08:11:20
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 03:11:13.155848 2026] [security2:error] [pid 15320:tid 15320] [client 104.207.52.4:28933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabosoftware.com"] [uri "/api/.git/config"] [unique_id "aYw5oUueWZwgSAo032ulJwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack