🇧🇪
cmbplf
2026-06-25 21:34:31
(4 hours ago)
3.017 requests with url.path //xmlrpc.php
Brute-Force
Bad Web Bot
🇪🇸
librebit
2026-06-24 03:25:05
(1 day ago)
Brute force
Brute-Force
2026-06-24 03:09:51
(1 day ago)
RdpGuard detected brute-force attempt on RD-WEB
Brute-Force
2026-06-23 00:57:16
(3 days ago)
RdpGuard detected brute-force attempt on RD-WEB
Brute-Force
🇫🇷
Sklurk
2026-06-20 02:28:44
(5 days ago)
Web App Attack
Web App Attack
🇦🇱
cheatmaster.store
2026-02-27 01:15:45
(3 months ago)
Automated report: This IP address has been identified as an active public open proxy.
Classification ...
show more
Automated report: This IP address has been identified as an active public open proxy.
Classification: Open Proxy | Spoofing | VPN/Anonymizer | Bad Web Bot.
Country: Canada
Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic.
Reported by automated threat intelligence pipeline. Do not whitelist without manual verification.
show less
Web Spam
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 12:49:38
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:49:31.299697 2026] [security2:error] [pid 2864364:tid 2864364] [client 104.207.59.100:35973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "todosconlaura.com"] [uri "/config/.env"] [unique_id "aZHA23SjtsHwpMnqeULV7wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-02-15 12:19:49
(4 months ago)
(modsecurity) srv101 ModSecurity 104.207.59.100 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Di ...
show more
(modsecurity) srv101 ModSecurity 104.207.59.100 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:55:05
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:54:59.504475 2026] [security2:error] [pid 21728:tid 21728] [client 104.207.59.100:56603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teamsewusa.com"] [uri "/app/.env"] [unique_id "aZG0Ex_pLrutRlCZjWE2FgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:48:57
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:48:52.382806 2026] [security2:error] [pid 19005:tid 19005] [client 104.207.59.100:14765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talentstar.com"] [uri "/backup/.git/config"] [unique_id "aZFsVFLPsLcNscatV1B39wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:57:21
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:57:14.461496 2026] [security2:error] [pid 2170:tid 2256] [client 104.207.59.100:48423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sujugada.com"] [uri "/admin/.git/config"] [unique_id "aZFSKmK04aBCi-tiI-BeXAAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:59:02
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:58:55.354152 2026] [security2:error] [pid 18828:tid 18828] [client 104.207.59.100:35283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stmaarten-boatcharters.com"] [uri "/.env.production"] [unique_id "aZFEf3axBKs3L9GNjn8RoQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:14:29
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:14:21.205953 2026] [security2:error] [pid 25698:tid 25698] [client 104.207.59.100:33277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stansco.com"] [uri "/.env.staging"] [unique_id "aZE6DfmsSQJViqAayI7ARwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-02-15 02:58:02
(4 months ago)
. Matched phrase "/.env" at REQUEST_URI. (210492-123)
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 02:26:09
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.59.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:26:05.813607 2026] [security2:error] [pid 197504:tid 197504] [client 104.207.59.100:47661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mysticbitchsalon.com"] [uri "/.git/config"] [unique_id "aZEuvWkCgf5gVL809N1tFwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack