🇮🇹
[email protected]
2026-04-18 01:41:34
(1 month ago)
[Sat Apr 18 03:41:33.636301 2026] [authz_core:error] [pid 560720:tid 560765] [remote 104.207.57.243: ...
show more
[Sat Apr 18 03:41:33.636301 2026] [authz_core:error] [pid 560720:tid 560765] [remote 104.207.57.243:45457] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php
...
show less
Brute-Force
Web App Attack
2026-02-15 16:31:08
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-02-15 12:34:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:34:52.625689 2026] [security2:error] [pid 1299:tid 1299] [client 104.207.57.243:28097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partybuswhistler.com"] [uri "/config/.env"] [unique_id "aZG9bB5vL9QVE9e48Z2nuAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 12:02:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:02:03.918371 2026] [security2:error] [pid 9205:tid 9205] [client 104.207.57.243:19967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamelalambert.com"] [uri "/api/.git/config"] [unique_id "aZG1u4zz-sK1vRgrE-wrIgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
lns.bz
2026-02-15 11:32:15
(3 months ago)
Too many 404 requests [DOOZ]
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:12:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:12:48.797573 2026] [security2:error] [pid 591491:tid 591491] [client 104.207.57.243:62447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "purelywhimsical.com"] [uri "/wp/.git/config"] [unique_id "aZGqMJ668h9NnUoQVSRSOgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 10:57:14
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 05:57:10.500609 2026] [security2:error] [pid 1578:tid 1578] [client 104.207.57.243:39333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seekingthemind.com"] [uri "/admin/.git/config"] [unique_id "aZGmht8HTx4ekzHPU3H4qQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:58:13
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:58:06.531899 2026] [security2:error] [pid 9822:tid 9822] [client 104.207.57.243:48149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seapens.org"] [uri "/config/.env"] [unique_id "aZFufu8tFx68hjrjF1xFTwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:58:12
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:58:07.521014 2026] [security2:error] [pid 28181:tid 28181] [client 104.207.57.243:53021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omnithermal.com"] [uri "/backend/.env"] [unique_id "aZFgbx4U4ti2fsx6-fVH_gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:17:40
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:17:33.239330 2026] [security2:error] [pid 17152:tid 17152] [client 104.207.57.243:14123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ppichardocigars.com"] [uri "/dev/.git/config"] [unique_id "aZFI3UmVcpP4z5_w2FPbugAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:42:16
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:42:10.441684 2026] [security2:error] [pid 805803:tid 805803] [client 104.207.57.243:21195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nordicbuilders.net"] [uri "/admin/.git/config"] [unique_id "aZFAkpLzF7INrz-X50NJ_wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-15 03:28:04
(3 months ago)
Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /.env.staging HTTP/1.1, G ...
show more
Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
mnsf
2026-02-15 03:05:51
(3 months ago)
Scanning/Probing (23)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 02:30:07
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.57.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:30:03.455789 2026] [security2:error] [pid 15589:tid 15589] [client 104.207.57.243:42711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextngnr.com"] [uri "/.env.local"] [unique_id "aZEvq11LSLGec8OFNmtMwgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2026-02-15 01:59:14
(3 months ago)
C1: Web Attack GET /admin/.git/config
Web Spam
Hacking
Bad Web Bot
Web App Attack