🇺🇸
TPI-Abuse
2026-03-05 08:13:09
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 03:13:02.753584 2026] [security2:error] [pid 5955:tid 6066] [client 104.207.62.57:51067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howardhallis.com"] [uri "/.git/objects/5c/fe8c2e9dce0a040f2b9abc3bee2bb09d477157"] [unique_id "aak7DmjT4P6a9iFdA2bE3gAAAg8"], referer: http://www.howardhallis.com/.git/objects/5c/fe8c2e9dce0a040f2b9abc3bee2bb09d477157
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-02-20 12:39:18
(3 months ago)
WordPress login attempt
Brute-Force
🇦🇺
oncord
2026-02-19 01:32:37
(3 months ago)
Form spam
Web Spam
🇺🇸
oncord
2026-02-15 12:33:25
(3 months ago)
Form spam
Web Spam
🇭🇺
bcsaba
2025-12-28 20:57:38
(5 months ago)
Joomla spam
104.207.62.57 - - [28/Dec/2025:21:57:36 +0100] "GET /index.php?option=com_easyblog&view= ...
show more
Joomla spam
104.207.62.57 - - [28/Dec/2025:21:57:36 +0100] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://*REDACTED*" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 14:52:11
(5 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ...
show more
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
show less
DDoS Attack
SQL Injection
Exploited Host
🇺🇸
TPI-Abuse
2025-12-08 22:35:11
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 17:35:05.604246 2025] [security2:error] [pid 27790:tid 27790] [client 104.207.62.57:55161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blazezito.com"] [uri "/.git/HEAD"] [unique_id "aTdSmQlKNFQJUo7Mlwr2YAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 14:33:33
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:33:27.832124 2025] [security2:error] [pid 19255:tid 19255] [client 104.207.62.57:57731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perverseconsequences.org"] [uri "/.svn/wc.db"] [unique_id "aTWQN1oyiYjxuyQQdm1p_gAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 13:33:02
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:32:59.546859 2025] [security2:error] [pid 30365:tid 30365] [client 104.207.62.57:33873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honer.org"] [uri "/.env"] [unique_id "aTWCC8IAPN_Fg5lvEqO6hwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2025-12-07 04:54:40
(5 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 12:12:59
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 07:12:52.351017 2025] [security2:error] [pid 5569:tid 5569] [client 104.207.62.57:41303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talentguard.net"] [uri "/.env"] [unique_id "aTQdxChMEKlcBB8jLYCIrwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 11:32:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 06:31:53.913060 2025] [security2:error] [pid 26959:tid 26959] [client 104.207.62.57:53853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amatosdrywall.com"] [uri "/.env"] [unique_id "aTLCqQC71AibDP6kPrt3KwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 08:40:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 03:40:33.891683 2025] [security2:error] [pid 25893:tid 25893] [client 104.207.62.57:59119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landeagle.com"] [uri "/.env"] [unique_id "aTKagYpMeWepKGwt1GXiAAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 07:01:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:01:53.381535 2025] [security2:error] [pid 32217:tid 32217] [client 104.207.62.57:22327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realtorpaul.com"] [uri "/.svn/wc.db"] [unique_id "aTKDYfbk7GaRN168n_l7nwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:37:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:37:33.299573 2025] [security2:error] [pid 26157:tid 26157] [client 104.207.62.57:47275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jockoenterprises.com"] [uri "/.env"] [unique_id "aTJTfcZK4I4xOQaY6m6R-QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack