🇩🇪
4server
2026-05-12 21:09:57
(3 weeks ago)
[TueMay1223:09:53.9399872026][security2:error][pid630676:tid630733][client104.207.60.235:0]ModSecuri ...
show more
[TueMay1223:09:53.9399872026][security2:error][pid630676:tid630733][client104.207.60.235:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"traslochisubito.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"agOXIcviV5qms1SzhmgucgAAAFI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-04-03 03:36:07
(2 months ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-03-29 10:02:54
(2 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇪🇸
el-brujo
2026-03-24 01:56:07
(2 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: DREI-K-TECH-GMBH Country: CA Method: GET Timestamp: 2026-03-24T01:56:07Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 07:21:22
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 02:21:15.613719 2026] [security2:error] [pid 26313:tid 26313] [client 104.207.60.235:20889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "friendlyfarm4fun.daisydoesoap.com"] [uri "/.git/config"] [unique_id "aZ1RaxQJe3ghnYSGY1aUXAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 03:52:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 22:52:48.758469 2026] [security2:error] [pid 26212:tid 26212] [client 104.207.60.235:30039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "busybconstruction.ewingmissouri.com"] [uri "/.git/config"] [unique_id "aZ0gkBoxxnVXkIOBQTCpowAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 23:49:12
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 18:49:06.522529 2026] [security2:error] [pid 12403:tid 12403] [client 104.207.60.235:54705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "instagenii.ficklepassionproductions.com"] [uri "/.git/config"] [unique_id "aZznciCIuOTq9a_lQLQ5DAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 22:28:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 17:28:18.507610 2026] [security2:error] [pid 6458:tid 6458] [client 104.207.60.235:53067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.wave94.com"] [uri "/.git/config"] [unique_id "aZzUgsumYP3Qs69tGJtn7AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 20:22:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:22:01.592635 2026] [security2:error] [pid 25970:tid 25970] [client 104.207.60.235:9931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blog.ic1.biz"] [uri "/.git/config"] [unique_id "aZy26f2TqTPp-GwUzYQEigAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
[email protected]
2026-01-03 04:16:28
(5 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-03T04:16:28Z
Brute-Force
🇺🇸
[email protected]
2026-01-03 04:01:00
(5 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-03T04:01:00Z
Brute-Force
🇺🇸
[email protected]
2026-01-03 03:42:09
(5 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-03T03:42:09Z
Brute-Force
🇺🇸
[email protected]
2026-01-03 03:19:06
(5 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-03T03:19:06Z
Brute-Force
🇺🇸
[email protected]
2026-01-03 03:01:00
(5 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-03T03:01:00Z
Brute-Force
🇺🇸
[email protected]
2026-01-03 02:44:03
(5 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-03T02:44:03Z
Brute-Force