🇫🇷
dynamix
2026-03-27 01:52:09
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-03-27 01:06:25
(2 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇩🇪
F242
2026-01-30 05:11:58
(4 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇺🇸
Vano Ganzzz
2025-12-21 03:01:06
(5 months ago)
Triggered Cloudflare WAF (l7ddos) from DE.
Action taken: BLOCK
ASN: 200373 (DREI-K-TECH-GMBH)
Protoc ...
show more
Triggered Cloudflare WAF (l7ddos) from DE.
Action taken: BLOCK
ASN: 200373 (DREI-K-TECH-GMBH)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2025-12-21T03:01:06Z
Ray ID: 9b142209afe4a56e
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-11 01:50:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 20:50:08.167441 2025] [security2:error] [pid 25448:tid 25448] [client 104.207.62.253:10073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lidarthur.com"] [uri "/.svn/wc.db"] [unique_id "aTojUJLc8cuZl7zKY3SUJwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 09:58:02
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 04:57:59.164854 2025] [security2:error] [pid 18743:tid 18743] [client 104.207.62.253:41209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seychelles-boat-registration.com"] [uri "/.env"] [unique_id "aTfypzotw_lMiy4UvKm4vQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 14:58:30
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:58:25.768150 2025] [security2:error] [pid 29088:tid 29093] [client 104.207.62.253:53067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secdc.org"] [uri "/.env"] [unique_id "aTWWEfWvbNsN7fSbsm92zAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 14:42:23
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:42:20.088020 2025] [security2:error] [pid 25242:tid 25265] [client 104.207.62.253:33609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "progenicyte.org"] [uri "/.env"] [unique_id "aTWSTFXztQnRaD2s0KuvCwAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 13:59:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 08:58:57.580934 2025] [security2:error] [pid 32026:tid 32026] [client 104.207.62.253:59291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bpcompany.net"] [uri "/.git/HEAD"] [unique_id "aTQ2oR8Di0YRmeX1lt0MGwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 13:14:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 08:14:53.528997 2025] [security2:error] [pid 26909:tid 26909] [client 104.207.62.253:31409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cartoonchristmascard.com"] [uri "/.env"] [unique_id "aTLazSDfT2lGO_R87W2XpwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:08:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:08:17.860331 2025] [security2:error] [pid 28951:tid 28951] [client 104.207.62.253:40049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autumn-kennedy.com"] [uri "/.env"] [unique_id "aTKvEeK7kBLfs5LHIQwoKQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 08:22:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 03:22:19.890708 2025] [security2:error] [pid 4097:tid 4097] [client 104.207.62.253:59547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pleasefixmycomputer.com"] [uri "/.env"] [unique_id "aTKWO7iEMd9Tqyz40sUE8gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:52:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:52:38.290533 2025] [security2:error] [pid 16409:tid 16409] [client 104.207.62.253:43423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vincentmonaco.com"] [uri "/.git/HEAD"] [unique_id "aTJXBhwQJtl6yrli5_WdNAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:10:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:10:09.207492 2025] [security2:error] [pid 25741:tid 25741] [client 104.207.62.253:23779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koolcoastalnights.com"] [uri "/.env"] [unique_id "aTJNEYjwdm8WxScpoIXBtAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 00:39:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 19:39:33.613638 2025] [security2:error] [pid 9704:tid 9704] [client 104.207.62.253:26869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pharmahc.com"] [uri "/.git/HEAD"] [unique_id "aTIpxaaEtXKi_rE8F5eWHgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack