๐ง๐ช
madeit
2026-09-04 05:43:57
(2 days ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-16 23:08:27
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:08:22.618291 2026] [security2:error] [pid 10646:tid 10646] [client 104.23.217.37:11040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.effectivefirearms.com"] [uri "/.git/config"] [unique_id "aoJC5kHTeqvWAIcwooIrPQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-14 21:52:00
(3 weeks ago)
104.23.217.37 - - [14/Aug/2026:23:51:56 +0200] "GET /xxl.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 ...
show more
104.23.217.37 - - [14/Aug/2026:23:51:56 +0200] "GET /xxl.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:56 +0200] "GET /xxw.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:57 +0200] "GET /XxX.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:57 +0200] "GET /xxxx.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:57 +0200] "GET /xy.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:57 +0200] "GET /xy/index.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:57 +0200] "GET /xy9brdftkyivz9ij6rusmsCdefault.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:57 +0200] "GET /yaztn.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:57 +0200] "GET /yjoxrfglsep.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:58 +0200] "GET /ynz.PhP HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [14/Aug/2026:23:51:58 +0200] "GET /yongxing/index.php HTTP/1.1" 404 12
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-09 15:22:12
(3 weeks ago)
104.23.217.37 - - [09/Aug/2026:17:22:09 +0200] "GET /index/function.php HTTP/1.1" 404 124 "-" "-"
10 ...
show more
104.23.217.37 - - [09/Aug/2026:17:22:09 +0200] "GET /index/function.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:09 +0200] "GET /edit.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:09 +0200] "GET /wp-includes/rest-api/ HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:09 +0200] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:09 +0200] "GET /wp-good.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:10 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:10 +0200] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:10 +0200] "GET /tes.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:10 +0200] "GET /files/index.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [09/Aug/2026:17:22:10 +0200] "GET /wp-content/uploads/index.php HTTP/1.1" 404 124 "-" "-"
104.2
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-04 10:18:18
(1 month ago)
104.23.217.37 - - [04/Aug/2026:12:18:17 +0200] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 404 ...
show more
104.23.217.37 - - [04/Aug/2026:12:18:17 +0200] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [04/Aug/2026:12:18:17 +0200] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [04/Aug/2026:12:18:17 +0200] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [04/Aug/2026:12:18:18 +0200] "GET /wp-content/themes/seotheme/db.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [04/Aug/2026:12:18:18 +0200] "GET /wp-content/plugins/seoplugins/db.php HTTP/1.1" 404 124 "-" "-"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
mawan
2026-08-04 00:41:14
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
Anonymous
2026-08-02 07:49:15
(1 month ago)
104.23.217.37 - - [02/Aug/2026:09:49:11 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 124 ...
show more
104.23.217.37 - - [02/Aug/2026:09:49:11 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:11 +0200] "GET /IndoSec.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:11 +0200] "GET //autoload_classmap.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:12 +0200] "GET //alfa.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:12 +0200] "GET //wp-includes/assets/index.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:12 +0200] "GET /luxe.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:12 +0200] "GET /update/wpupex.php/ HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:13 +0200] "GET /rezor.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:13 +0200] "GET //doc.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09:49:13 +0200] "GET //wp-admin/user/index.php HTTP/1.1" 404 124 "-" "-"
104.23.217.37 - - [02/Aug/2026:09
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-10 06:21:42
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:04:20
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:04:17.226448 2026] [security2:error] [pid 12802:tid 12802] [client 104.23.217.37:12236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celeritas.borzois.com"] [uri "/.git/config"] [unique_id "aid0oc3V1hPSSxXZ6Ys3LQAAAH0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 21:48:12
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 17:48:06.842342 2026] [security2:error] [pid 29690:tid 29690] [client 104.23.217.37:13257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blog.kemela.com"] [uri "/.git/config"] [unique_id "aic4liZybK4eWaysVLrteAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 19:23:13
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 15:23:10.105022 2026] [security2:error] [pid 29785:tid 29785] [client 104.23.217.37:13986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.iconbizpromo.com"] [uri "/.git/config"] [unique_id "aicWnjumsjSqQlTT9bthwwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
abdubhai
2026-06-05 08:29:54
(3 months ago)
104.23.217.37 - - [05/Jun/2026:1
...
Brute-Force
๐จ๐ญ
backslash
2026-05-23 05:18:00
(3 months ago)
Bad Web Bot
๐ท๐บ
DZBOT
2026-05-21 12:34:02
(3 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-17 18:55:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.217.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 14:55:12.158428 2026] [security2:error] [pid 23552:tid 23552] [client 104.23.217.37:13067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "focusedinnertraining.starrmail.net"] [uri "/.git/config"] [unique_id "agoPEBRUTE0k2eI8p_XlWgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack