🇺🇸
oncord
2026-03-21 03:37:14
(2 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-03-02 01:50:27
(3 months ago)
Form spam
Web Spam
🇱🇻
garmtech.com
2026-02-26 20:56:43
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-56.104.207.58.70.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-56.104.207.58.70.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇦🇺
oncord
2026-02-13 13:56:02
(3 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-13 07:28:10
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:28:05.207050 2026] [security2:error] [pid 21942:tid 21942] [client 104.207.58.70:44603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurikka.eu"] [uri "/.env.staging"] [unique_id "aY7ShXc-4x9GrxuBGLjOMAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:25:48
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:25:41.565713 2026] [security2:error] [pid 24716:tid 24716] [client 104.207.58.70:50621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kirkrmartin.com"] [uri "/wp/.git/config"] [unique_id "aY6nxT1f6qCy196l7WDGQwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:24:10
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:24:05.858404 2026] [security2:error] [pid 30559:tid 30559] [client 104.207.58.70:15369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karsini-services.com"] [uri "/backup/.git/config"] [unique_id "aY59Nay67rRni8cbW1LMagAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-12 22:59:29
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-12
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-12 16:26:25
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 11:26:21.785094 2026] [security2:error] [pid 29135:tid 29135] [client 104.207.58.70:28397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armandselmwoodpark.com"] [uri "/.env"] [unique_id "aY3_LdWWXSIDL4lnozd-ygAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 01:44:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 20:44:23.774949 2026] [security2:error] [pid 335:tid 335] [client 104.207.58.70:38423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brushmileage.org"] [uri "/.env.staging"] [unique_id "aY0wd7B0dIDceeYSyYL6rgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 15:57:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 10:57:50.903310 2026] [security2:error] [pid 17820:tid 17820] [client 104.207.58.70:58515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edsantos.biz"] [uri "/v2/.git/config"] [unique_id "aYym_oda4iSRgRxF3EtgFwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-11 05:27:03
(3 months ago)
Blocking for trying to access an exploit file: /config/.env
Hacking
🇺🇸
TPI-Abuse
2026-02-11 04:28:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 23:28:25.560904 2026] [security2:error] [pid 11985:tid 11985] [client 104.207.58.70:26479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coroneta.com"] [uri "/.env.production"] [unique_id "aYwFaR5D-reUBTFqi-0qiAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 03:28:48
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 22:28:43.280097 2026] [security2:error] [pid 22649:tid 22649] [client 104.207.58.70:15529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corinthianscruise.org"] [uri "/.env"] [unique_id "aYv3axiXrg48xO8TT5jrKQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:10:26
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.58.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:10:21.725820 2026] [security2:error] [pid 1412568:tid 1412568] [client 104.207.58.70:23307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgewmartin.com"] [uri "/api/.env"] [unique_id "aYqhnXVN7K6KEols_9EmQgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack