🇦🇺
MAGIC
2026-04-21 01:03:16
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇹
[email protected]
2026-04-18 07:00:06
(1 month ago)
[Sat Apr 18 09:00:05.744559 2026] [authz_core:error] [pid 560721:tid 560794] [remote 104.207.52.61:4 ...
show more
[Sat Apr 18 09:00:05.744559 2026] [authz_core:error] [pid 560721:tid 560794] [remote 104.207.52.61:43095] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php
...
show less
Brute-Force
Web App Attack
🇹🇷
Detmach
2026-04-10 00:43:36
(1 month ago)
Security attack detected. Multiple failed attempts from 104.207.52.61. IP banned for 1440 minutes at ...
show more
Security attack detected. Multiple failed attempts from 104.207.52.61. IP banned for 1440 minutes at 10.04.2026 03:42:54. Failed attempts: 1
show less
Brute-Force
🇪🇸
librebit
2026-04-08 16:27:22
(1 month ago)
Brute force
Brute-Force
🇺🇸
mnsf
2026-03-15 21:05:21
(2 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-25 23:00:45
(6 months ago)
Auto-ban: >3000 req/min op 2025-11-25
Hacking
Web App Attack
SSH
🇯🇵
Valhalla
2025-11-25 19:08:24
(6 months ago)
/.aws/credentials
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:25:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:24:09.860802 2025] [security2:error] [pid 18635:tid 18635] [client 104.207.52.61:43427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.serhanemre.com"] [uri "/.svn/wc.db"] [unique_id "aSVLib9L16ceBUH72MFxxwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:56:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:56:31.994675 2025] [security2:error] [pid 20818:tid 20818] [client 104.207.52.61:12843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.neonmotel.com"] [uri "/.git/HEAD"] [unique_id "aSUa33zEXcLD5iz51w2KOAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:36:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:36:49.932053 2025] [security2:error] [pid 3127:tid 3127] [client 104.207.52.61:11827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buygoldandsilveratspot.mroxygen.org"] [uri "/.svn/wc.db"] [unique_id "aSUWQeEu1lf_qIdELZsZVQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:19:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:19:04.361482 2025] [security2:error] [pid 30535:tid 30535] [client 104.207.52.61:37229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blog.l3l4.com"] [uri "/.svn/wc.db"] [unique_id "aSUSGNt4cSrlAhiXrpp3ygAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:32:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:31:50.623410 2025] [security2:error] [pid 1647141:tid 1647218] [client 104.207.52.61:48875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rodela.com"] [uri "/.git/HEAD"] [unique_id "aSUHBtffCdpZ5cNrCNdS4QAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:02:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:02:10.027159 2025] [security2:error] [pid 32404:tid 32404] [client 104.207.52.61:21079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lawandaudit.com"] [uri "/.env"] [unique_id "aSTyAqu3b3DwOF1LK1iITQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:08:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:08:26.347564 2025] [security2:error] [pid 16351:tid 16351] [client 104.207.52.61:26893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cincuentena.aguasolar.com"] [uri "/.svn/wc.db"] [unique_id "aSQSerV4-3kdBgmliGMrqQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:25:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:25:02.898474 2025] [security2:error] [pid 8787:tid 8787] [client 104.207.52.61:17073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nadepot.nodepot.com"] [uri "/.svn/wc.db"] [unique_id "aSP6PuBOhgE_T9YE_t1yRQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack