2026-01-05 20:26:43
(5 months ago)
Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 9 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
myagent.site
2026-01-01 02:51:59
(5 months ago)
Blocking for trying to access an exploit file: /wordpress//installer.php
Hacking
2025-12-31 22:12:48
(5 months ago)
wordpress-trap
Web App Attack
2025-12-12 00:16:18
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-10 10:10:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 05:10:04.694380 2025] [security2:error] [pid 15009:tid 15009] [client 104.207.55.134:51285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tesacate.com"] [uri "/.env"] [unique_id "aTlG_EwdPfASlTvBmVpdvwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2025-12-10 08:17:57
(6 months ago)
(php_susp_dir) srv103 PHP in suspicious dir 104.207.55.134 (DE/Germany/-): 1 in the last 3600 secs; ...
show more
(php_susp_dir) srv103 PHP in suspicious dir 104.207.55.134 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 19:22:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 14:22:01.870630 2025] [security2:error] [pid 32331:tid 32331] [client 104.207.55.134:53705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "86mountaineers.net"] [uri "/.git/HEAD"] [unique_id "aTSCWdRR0zV5erhbY2Wd5gAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 16:41:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:41:43.122631 2025] [security2:error] [pid 14992:tid 14992] [client 104.207.55.134:13713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tonydelov.net"] [uri "/.git/HEAD"] [unique_id "aTRcx2s_HuDJS625UHuJzQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 12:59:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 07:59:14.871766 2025] [security2:error] [pid 5114:tid 5114] [client 104.207.55.134:27767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taafe.net"] [uri "/.svn/wc.db"] [unique_id "aTQoouV4d3LMUqVIizn6TAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 11:34:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 06:34:34.777942 2025] [security2:error] [pid 18508:tid 18525] [client 104.207.55.134:16547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "poeticdialogues.com"] [uri "/.git/HEAD"] [unique_id "aTLDSk6QxcYcOHsrjFUCiQAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 05:55:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:55:31.250844 2025] [security2:error] [pid 15239:tid 15239] [client 104.207.55.134:30285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valarien.com"] [uri "/.env"] [unique_id "aTJz0-dXouTKlTLzOk5B0QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-12-03 07:40:50
(6 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇱🇻
garmtech.com
2025-11-24 12:12:48
(6 months ago)
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:46:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:46:47.723325 2025] [security2:error] [pid 18115:tid 18115] [client 104.207.55.134:43771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "book-arts-press.com"] [uri "/.git/HEAD"] [unique_id "aSQphyoTQv0rYZsrmJPseQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:41:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:41:12.491832 2025] [security2:error] [pid 18664:tid 18664] [client 104.207.55.134:12477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.suppaddler.com"] [uri "/.svn/wc.db"] [unique_id "aSQaKCkp2UlVxdaXKYrbeQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack