🇫🇷
ELYAZ
2026-05-31 04:13:56
(1 week ago)
(y4) Failed scan -byebye- from 104.207.54.3 (DE/Germany/-): (CF_ENABLE)
Hacking
2026-05-30 04:20:25
(1 week ago)
Web attack blocked by Wordfence on kunstkringhenrijonas.nl (1 hit). Reported by CRMON.
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 04:52:33
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:52:28.488676 2026] [security2:error] [pid 6129:tid 6129] [client 104.207.54.3:12941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kompareiq.com"] [uri "/wp/.git/config"] [unique_id "aZaXDHuwE-N1Kz4289QncgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 02:11:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:11:38.263867 2026] [security2:error] [pid 32261:tid 32261] [client 104.207.54.3:61775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathiehazlett.com"] [uri "/app/.git/config"] [unique_id "aZZxWvEA2_S4jfvrScj2FQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 13:18:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 08:18:51.267995 2026] [security2:error] [pid 1271068:tid 1271068] [client 104.207.54.3:31381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "williamfitzsimmons.com"] [uri "/.env.staging"] [unique_id "aZW8O1qmD4-9stJTS0EWrAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 12:00:25
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:00:19.733002 2026] [security2:error] [pid 4717:tid 4740] [client 104.207.54.3:57023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wassell.org"] [uri "/test/.git/config"] [unique_id "aZWp0_fZJorvt0B651D4FAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-11 09:01:00
(3 months ago)
SMS pumping
DDoS Attack
VPN IP
Bad Web Bot
Web App Attack
2026-01-05 02:28:36
(5 months ago)
Attempted brute force login to web vpn 24 time(s); last attempt for 2026.01.05 is noted in report ti ...
show more
Attempted brute force login to web vpn 24 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
2025-12-21 10:45:41
(5 months ago)
Attempted brute force login to web vpn 109 time(s); last attempt for 2025.12.21 is noted in report t ...
show more
Attempted brute force login to web vpn 109 time(s); last attempt for 2025.12.21 is noted in report timestamp
show less
Hacking
Brute-Force
2025-12-19 23:59:25
(5 months ago)
Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.19 is noted in report ti ...
show more
Attempted brute force login to web vpn 90 time(s); last attempt for 2025.12.19 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-12-02 20:32:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:32:29.424054 2025] [security2:error] [pid 10634:tid 10634] [client 104.207.54.3:16213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jackandmaxk.com"] [uri "/.git/HEAD"] [unique_id "aS9M3b95CVFWiEXyDdZF2AAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-02 18:20:21
(6 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-02 15:29:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:29:31.863269 2025] [security2:error] [pid 15271:tid 15271] [client 104.207.54.3:55633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eissenstat.com"] [uri "/.env"] [unique_id "aS8F2zk49ekIT3HIP62MpwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 10:02:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 05:02:02.237388 2025] [security2:error] [pid 28702:tid 28702] [client 104.207.54.3:37857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visage-nico.com"] [uri "/.git/HEAD"] [unique_id "aS65GiAKy_Wd5O2DCZ1PogAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 21:31:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.54.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:30:56.074177 2025] [security2:error] [pid 638260:tid 638260] [client 104.207.54.3:51983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "expresstires.us"] [uri "/.svn/wc.db"] [unique_id "aSjDELMlpTWP5Asy9b1sFAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack