🇨🇭
backslash
2026-05-23 05:06:16
(3 weeks ago)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-11 19:55:13
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 14:55:01.999695 2026] [security2:error] [pid 11753:tid 11753] [client 104.207.63.48:52229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "architech.com"] [uri "/.env.save"] [unique_id "aYzelZuWwGLzwFYr2O58PgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-11 09:01:00
(4 months ago)
SMS pumping
DDoS Attack
VPN IP
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 22:08:36
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 17:08:30.112428 2026] [security2:error] [pid 6157:tid 6157] [client 104.207.63.48:38135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appalachianstomp.com"] [uri "/.env"] [unique_id "aYusXuTpySws8ER4IoeajAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 17:11:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 12:11:36.101433 2026] [security2:error] [pid 12325:tid 12325] [client 104.207.63.48:64271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "18mstudio.com"] [uri "/.env.local"] [unique_id "aYtmyGvUe8DIT3im7QItsgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 16:10:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:09:58.347308 2026] [security2:error] [pid 21045:tid 21051] [client 104.207.63.48:57097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "12am.us"] [uri "/api/.env"] [unique_id "aYtYVkbhlAcrdkcO_sPbjAAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:07:51
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:07:44.354444 2026] [security2:error] [pid 23257:tid 23284] [client 104.207.63.48:10247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madtruckerbill.com"] [uri "/.env.staging"] [unique_id "aYqhAHufXfAJQmS5a-_RMQAAAVc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:34:10
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:33:56.955195 2026] [security2:error] [pid 12745:tid 12756] [client 104.207.63.48:56351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kellenlee.com"] [uri "/.git/config"] [unique_id "aYpu5CzFaBOFmlrgLfFwfwAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 19:45:52
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:45:24.997137 2026] [security2:error] [pid 26334:tid 26334] [client 104.207.63.48:24819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homebuyerpros.com"] [uri "/v2/.git/config"] [unique_id "aYo5VHKZskACqhA5ch0XgAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-01-17 13:28:53
(4 months ago)
Brute force
Brute-Force
2026-01-04 04:21:49
(5 months ago)
Infected user bad webscan
Exploited Host
🇺🇸
oncord
2026-01-02 05:09:10
(5 months ago)
Form spam
Web Spam
🇩🇰
TransAdvice-Abuse
2025-12-26 06:06:58
(5 months ago)
IRC SPAM/Flood
DDoS Attack
🇧🇪
madeit
2025-11-30 04:29:57
(6 months ago)
Web App Attack
🇦🇺
oncord
2025-11-12 07:13:41
(7 months ago)
Form spam
Web Spam