🇦🇺
oncord
2026-04-07 15:23:48
(1 month ago)
Form spam
Web Spam
🇦🇺
oncord
2026-03-17 12:01:05
(2 months ago)
Form spam
Web Spam
🇺🇸
oncord
2026-03-01 20:14:06
(3 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-10 05:41:18
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:41:12.765681 2026] [security2:error] [pid 32331:tid 32331] [client 104.207.60.199:12291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kobraagencies.com"] [uri "/frontend/.env"] [unique_id "aYrE-N4ZMMoZsBKQ4b7i5wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Thaliruth
2026-02-10 04:33:04
(3 months ago)
[10/Feb/2026:05:33:04.556367 +0100] aYq1AKlAMQ-pIO4cPOkRYwAAABE 104.207.60.199 35684 127.0.0.1 7080
...
show more
[10/Feb/2026:05:33:04.556367 +0100] aYq1AKlAMQ-pIO4cPOkRYwAAABE 104.207.60.199 35684 127.0.0.1 7080
...
show less
Hacking
🇺🇸
TPI-Abuse
2026-02-10 03:11:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:11:00.303758 2026] [security2:error] [pid 11447:tid 11447] [client 104.207.60.199:9859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinkycouple4u.com"] [uri "/admin/.env"] [unique_id "aYqhxA8mg_x4AsBnj2THaAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:17:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:17:14.210261 2026] [security2:error] [pid 19539:tid 19539] [client 104.207.60.199:32203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keepingitsharp.biz"] [uri "/backup/.git/config"] [unique_id "aYpq-nl9n2gSojSfQsnzuwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 09:04:53
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 04:04:46.258699 2026] [security2:error] [pid 23750:tid 23773] [client 104.207.60.199:59503] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||iamfluff.com|F|2"] [data ".iamfluff.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "iamfluff.com"] [uri "/ftp:/ftp.iamfluff.com"] [unique_id "aX8XLpHH1rfh3lRMwp00NAAAAJU"], referer: http://iamfluff.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 02:33:10
(4 months ago)
(mod_security) mod_security (id:217280) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:217280) triggered by 104.207.60.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 21:33:03.820773 2026] [security2:error] [pid 31316:tid 31316] [client 104.207.60.199:58779] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||amoriotech.com|F|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "amoriotech.com"] [uri "/contact"] [unique_id "aXbSX048WkVTWqUImr9jdQAAAAU"], referer: https://amoriotech.com/contact
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-01-23 08:20:04
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇦🇺
oncord
2026-01-22 14:18:13
(4 months ago)
Form spam
Web Spam
🇱🇻
garmtech.com
2026-01-20 05:08:55
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-08.104.207.60.199.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-08.104.207.60.199.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇦🇺
oncord
2026-01-02 16:46:50
(5 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-12-28 16:55:15
(5 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-12-27 12:15:01
(5 months ago)
Form spam
Web Spam