🇩🇪
4server
2026-06-18 08:01:19
(4 days ago)
[ThuJun1810:01:18.2036192026][security2:error][pid609141:tid609155][client104.207.62.14:0]ModSecurit ...
show more
[ThuJun1810:01:18.2036192026][security2:error][pid609141:tid609155][client104.207.62.14:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"wildpferde.ch\"][uri\"/.git/config\"][unique_id\"ajOlzsP0KP4A_-UR21mQ4gAAAAs\"]
show less
Port Scan
Brute-Force
Web App Attack
🇬🇧
Oakley
2026-06-18 07:42:45
(4 days ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇺🇸
TPI-Abuse
2026-06-18 07:20:56
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 03:20:50.045044 2026] [security2:error] [pid 17135:tid 17135] [client 104.207.62.14:41093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tracytappan.net"] [uri "/.git/config"] [unique_id "ajOcUpdgDVPFiWczwSGZIQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-18 04:55:01
(4 days ago)
suspicious request in access.log
Web App Attack
🇩🇪
FeG Deutschland
2026-06-18 02:54:42
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 01:55:15
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 21:55:11.051925 2026] [security2:error] [pid 16967:tid 16967] [client 104.207.62.14:40539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gizmolabs.net"] [uri "/.git/config"] [unique_id "ajNP_5kOaThuNEguzJ1JWwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-18 01:12:32
(4 days ago)
Abuse Detected (2)
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-06-18 00:51:03
(4 days ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.git/config
Web App Attack
🇫🇷
masterguru
2026-06-16 08:49:49
(6 days ago)
SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 's ...
show more
SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 's&sos' (942100-193)
show less
SQL Injection
🇫🇷
tilellit.pro
2026-02-22 00:04:01
(4 months ago)
Fail2Ban banned 104.207.62.14 for security violations in jail wp-armour. Log: 2026/02/22 00:04:00 [e ...
show more
Fail2Ban banned 104.207.62.14 for security violations in jail wp-armour. Log: 2026/02/22 00:04:00 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.62.14 | Target: wplogin" , client: 104.207.62.14, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇬🇧
Swiptly
2026-01-21 14:51:30
(5 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2026-01-21 08:12:17
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 03:12:13.801621 2026] [security2:error] [pid 9863:tid 9863] [client 104.207.62.14:24515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chblanchard.fr"] [uri "/.git/HEAD"] [unique_id "aXCKXWPkopM2Wc62ih-C1wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-01-20 21:43:10
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-02 15:30:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:30:08.641918 2025] [security2:error] [pid 29054:tid 29054] [client 104.207.62.14:16485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "no1sicko.com"] [uri "/.env"] [unique_id "aS8GAEGKeNE24JCEJ9g5WgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:36:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:36:43.100565 2025] [security2:error] [pid 424357:tid 424503] [client 104.207.62.14:55705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onernet.com"] [uri "/.git/HEAD"] [unique_id "aS6XC0jGR0gyNky4Ba_rPAAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack