🇧🇪
cmbplf
2026-05-27 02:30:20
(1 week ago)
9.086 requests with url.path //xmlrpc.php
8.910 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇨🇭
backslash
2026-05-23 05:06:17
(2 weeks ago)
Bad Web Bot
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
2026-03-23 13:05:19
(2 months ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:57:04
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:57:01.150877 2026] [security2:error] [pid 5314:tid 5314] [client 104.207.63.83:30887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lambdaclimateresearch.com"] [uri "/admin/.git/config"] [unique_id "aY7nXWcGL87dPM0bUZhRRwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-02-13 08:04:46
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:30:14
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:30:07.332213 2026] [security2:error] [pid 26291:tid 26291] [client 104.207.63.83:58633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakowski.net"] [uri "/dev/.git/config"] [unique_id "aY7E71G65XmEna477p49zgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:02:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:02:13.837050 2026] [security2:error] [pid 1806:tid 1806] [client 104.207.63.83:40243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kooroshvaziri.com"] [uri "/api/.env"] [unique_id "aY6-ZeMKyEOaQGaLCot5UgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:07:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:07:01.334667 2026] [security2:error] [pid 19651:tid 19651] [client 104.207.63.83:63911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingfish.bet"] [uri "/.env.save"] [unique_id "aY6jZZnNiLmQTml4h7EzPAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:22:31
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:22:24.573751 2026] [security2:error] [pid 1148814:tid 1148814] [client 104.207.63.83:31599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keithgill.com"] [uri "/new/.git/config"] [unique_id "aY6K4COCpywA9jSy8l055wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:25:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:25:54.208652 2026] [security2:error] [pid 30932:tid 30932] [client 104.207.63.83:43973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "albionglobalmarketing.com"] [uri "/.git/config"] [unique_id "aY59onL1haTA5KmR2vvqqgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-13 00:56:37
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.63.83 (FR/France/-): 2 in t ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.63.83 (FR/France/-): 2 in the last 3600 secs
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-12 23:00:11
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-12
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-12 21:58:03
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 16:57:57.721526 2026] [security2:error] [pid 30368:tid 30368] [client 104.207.63.83:35481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abnewhorizons.com"] [uri "/.git/config"] [unique_id "aY5M5fffORkAn2XgjvriCQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 20:09:25
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.63.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 15:09:20.750616 2026] [security2:error] [pid 22348:tid 22363] [client 104.207.63.83:19659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ellicottville.net"] [uri "/.env"] [unique_id "aY4zcNww9ddkOpDKMxMYxgAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack