🇫🇷
pm33
2026-05-23 04:39:34
(2 weeks ago)
Wordpress login attempts
Brute-Force
🇺🇸
lostswordfish.com
2026-05-22 20:28:03
(2 weeks ago)
Wordfence waf block on wp20190711M4
Web App Attack
🇮🇹
[email protected]
2026-04-18 06:30:58
(1 month ago)
[Sat Apr 18 08:30:57.442610 2026] [authz_core:error] [pid 560721:tid 560792] [remote 104.207.53.134: ...
show more
[Sat Apr 18 08:30:57.442610 2026] [authz_core:error] [pid 560721:tid 560792] [remote 104.207.53.134:33349] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 12:19:38
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:19:33.666346 2026] [security2:error] [pid 16373:tid 16373] [client 104.207.53.134:56543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qualuedata.com"] [uri "/backup/.git/config"] [unique_id "aZG51dhiY5S6TP0uAAm-3wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-02-15 11:56:53
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 07:06:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 02:02:19.176331 2026] [security2:error] [pid 2386:tid 2386] [client 104.207.53.134:32681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pswebsite.com"] [uri "/api/.env"] [unique_id "aZFve0hOjGa1hAERflChZQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-15 07:05:40
(3 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:10:22
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:10:17.641798 2026] [security2:error] [pid 21818:tid 21818] [client 104.207.53.134:50055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schrankhome.com"] [uri "/admin/.git/config"] [unique_id "aZFjSVOadOys9q04EZ4HZQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2026-02-15 06:02:19
(3 months ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:34:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:34:17.515757 2026] [security2:error] [pid 21018:tid 21018] [client 104.207.53.134:42683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sbiusa.org"] [uri "/.env.production"] [unique_id "aZFa2S4s3Dh8oYvrYXuEaAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:10:30
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:10:25.773122 2026] [security2:error] [pid 7207:tid 7207] [client 104.207.53.134:63451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odessatexas.us"] [uri "/.env"] [unique_id "aZFVQR74ahA6u3sxSh7NbwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-15 04:59:05
(3 months ago)
Bot / scanning and/or hacking attempts: GET /api/.git/config HTTP/1.1, GET /admin/.env HTTP/1.1, GET ...
show more
Bot / scanning and/or hacking attempts: GET /api/.git/config HTTP/1.1, GET /admin/.env HTTP/1.1, GET /.env HTTP/1.1, GET /app/.env HTTP/1.1, GET /.env.staging HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
myagent.site
2026-02-15 04:55:28
(3 months ago)
Blocking for trying to access an exploit file: /config/.env
Hacking
🇺🇸
TPI-Abuse
2026-02-15 04:13:12
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:13:08.537412 2026] [security2:error] [pid 22200:tid 22264] [client 104.207.53.134:22071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "npaccountants.org"] [uri "/api/.git/config"] [unique_id "aZFH1PIf6G86OktE7M9tRQAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:56:51
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:56:41.136581 2026] [security2:error] [pid 2595:tid 2595] [client 104.207.53.134:58295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notarialota.cl"] [uri "/admin/.env"] [unique_id "aZFD-R3nczVOpFQ6L-EvjgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack