🇦🇺
oncord
2026-03-12 11:40:16
(2 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-03-07 21:53:01
(2 months ago)
Form spam
Web Spam
🇺🇸
oncord
2026-02-20 21:46:28
(3 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-20 06:45:10
(3 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-14 11:29:58
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.207.62.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 104.207.62.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 06:29:53.316310 2026] [security2:error] [pid 8795:tid 8795] [client 104.207.62.72:45029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bartholow.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bartholow.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZBcsTTs0uPqGI4Vs0PGngAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
oncord
2026-02-13 14:56:00
(3 months ago)
Form spam
Web Spam
🇮🇩
RasyiidWho
2026-02-12 15:16:22
(3 months ago)
ip112.20 . 104.207.62.72 - - [12/Feb/2026:22:16:21 +0700] "POST /xmlrpc.php HTTP/1.1" 401 172 "-" "A ...
show more
ip112.20 . 104.207.62.72 - - [12/Feb/2026:22:16:21 +0700] "POST /xmlrpc.php HTTP/1.1" 401 172 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)"
...
show less
DDoS Attack
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
SSH
🇺🇸
oncord
2026-02-09 21:31:40
(3 months ago)
Form spam
Web Spam
🇩🇪
stinpriza
2026-01-10 05:36:03
(4 months ago)
Web App Attack
Web App Attack
🇮🇹
VHosting
2025-12-23 22:55:12
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-26 08:11:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:11:35.851831 2025] [security2:error] [pid 5318:tid 5342] [client 104.207.62.72:40073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.productprose.andyboynton.com"] [uri "/.git/HEAD"] [unique_id "aSa2N4tQIEBqnJukf2LkDgAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-26 00:49:03
(6 months ago)
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:42:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:42:38.596647 2025] [security2:error] [pid 32366:tid 32366] [client 104.207.62.72:16587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.relayer.net"] [uri "/.git/HEAD"] [unique_id "aSZM_ukhhXUAjOTq7o-oEgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:34:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:34:30.641099 2025] [security2:error] [pid 14802:tid 14802] [client 104.207.62.72:40055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.masterfulenlighteningfreestudies.org"] [uri "/.svn/wc.db"] [unique_id "aST5lnCNjsFcMhUy0p7yywAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-24 17:50:32
(6 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH