🇩🇪
FeG Deutschland
2026-05-23 06:56:46
(4 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
koinkash.org
2026-05-23 01:40:24
(4 weeks ago)
They are fraudulent. Malicious threat actor requesting php file /wp-login.php
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-09 12:01:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 07:01:26.978832 2026] [security2:error] [pid 7169:tid 7169] [client 104.207.62.74:11511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galysh.us"] [uri "/admin/.git/config"] [unique_id "aYnMlkZiy1Xm5MDJXAZFfAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 09:30:13
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 04:30:01.929320 2026] [security2:error] [pid 23184:tid 23184] [client 104.207.62.74:42649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fulltime-life.com"] [uri "/api/.env"] [unique_id "aYmpGTqSSY9O_IffEYahcgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-08 23:35:45
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 18:35:38.197739 2026] [security2:error] [pid 14124:tid 14124] [client 104.207.62.74:25665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fsmfl.com"] [uri "/admin/.git/config"] [unique_id "aYkdyrEvR1220Vyve-VPFAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-01-21 13:15:03
(5 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 23:20:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 18:20:35.478095 2025] [security2:error] [pid 13436:tid 13436] [client 104.207.62.74:32501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firewoodart.com"] [uri "/.svn/wc.db"] [unique_id "aS90Q2J_H7eLhAGfLBL76AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 08:03:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:03:13.425409 2025] [security2:error] [pid 9224:tid 9224] [client 104.207.62.74:29223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "volunteergems.com"] [uri "/.git/HEAD"] [unique_id "aS6dQQHz7hPdm6fXNFvnQwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:45:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:44:55.988345 2025] [security2:error] [pid 21633:tid 21650] [client 104.207.62.74:42127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gryphix.com"] [uri "/.env"] [unique_id "aS5ux3tqpdoQru--A_BnmAAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
afleventoffice.com.au
2025-12-01 13:50:07
(6 months ago)
GET /.env HTTP/1.1
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 12:32:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:32:45.852980 2025] [security2:error] [pid 15771:tid 15771] [client 104.207.62.74:23289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.boatpeople.org"] [uri "/.svn/wc.db"] [unique_id "aSbzbUiMe_YW0oBK9SkLdAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:37:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:37:22.976578 2025] [security2:error] [pid 17902:tid 17902] [client 104.207.62.74:31393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vanmeer.info"] [uri "/.git/HEAD"] [unique_id "aSbKUtd-OodZHuoSJUJPrwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:04:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:04:39.103069 2025] [security2:error] [pid 12448:tid 12448] [client 104.207.62.74:30989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pilgrimpastor.my1611.com"] [uri "/.env"] [unique_id "aSbCp6THT4FClHSos7z-7gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 07:10:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.62.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:10:04.335047 2025] [security2:error] [pid 24589:tid 24589] [client 104.207.62.74:60009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pierrebastin.com"] [uri "/.git/HEAD"] [unique_id "aSanzG-q0TE0SnSzPPAtIwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack