🇨🇦
polycoda
2026-09-01 15:27:09
(5 hours ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based)
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 13:51:18
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:51:13.549615 2026] [security2:error] [pid 16135:tid 16135] [client 104.199.223.72:41532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pa-ksa.com"] [uri "/.env.production"] [unique_id "apbYUfWmxujWYewP-PePOwAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 12:49:18
(8 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 12:35:16
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:35:12.435192 2026] [security2:error] [pid 32101:tid 32101] [client 104.199.223.72:39030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clcmillvale.com"] [uri "/.env.local"] [unique_id "apbGgHLN20B6rT6I-oqkEQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 11:58:17
(8 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇺🇸
TPI-Abuse
2026-09-01 10:56:21
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:56:16.701037 2026] [security2:error] [pid 1012:tid 1012] [client 104.199.223.72:32794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.earlsworkshop.com"] [uri "/wp-config.php.bak"] [unique_id "apavUAl6pQGnadge5dWOIAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MyGlobalFlowers
2026-09-01 10:28:58
(10 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:06:52
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:06:46.180920 2026] [security2:error] [pid 27495:tid 27495] [client 104.199.223.72:51234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uglykid.net"] [uri "/.env.prod"] [unique_id "apajtldRf4W9uFap4JFCaAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
chronos
2026-09-01 09:56:25
(10 hours ago)
2026-09-01 06:32:28 UTC-3||Unauthorized connection attempt detected for port scanning
Port Scan
🇺🇸
TPI-Abuse
2026-09-01 09:43:39
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:43:31.494173 2026] [security2:error] [pid 1797:tid 1797] [client 104.199.223.72:47686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "springmeadowventures.com"] [uri "/.env.production"] [unique_id "apaeQ5OH5SN3bpP5pWT00wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-01 09:41:36
(11 hours ago)
URL Probing: /.env
Web App Attack
🇧🇷
chronos
2026-09-01 09:32:28
(11 hours ago)
Web traffic. Possible probing or exploitation attempts. | Port: 443 | Proto: TCP | Location: Taiwan, ...
show more
Web traffic. Possible probing or exploitation attempts. | Port: 443 | Proto: TCP | Location: Taiwan, Taipei
show less
Brute-Force
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 09:12:37
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:12:33.764431 2026] [security2:error] [pid 11431:tid 11431] [client 104.199.223.72:59462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "switkoprofiri.org"] [uri "/.env.old"] [unique_id "apaXATKfACQxF58cCoS83wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 07:50:12
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:49:58.442997 2026] [security2:error] [pid 25487:tid 25487] [client 104.199.223.72:38036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxbgsanta.com"] [uri "/wp-config.php~"] [unique_id "apaDpv1yc-pZH39sOOCTdwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 06:37:17
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.223.72 (72.223.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:37:09.866438 2026] [security2:error] [pid 29825:tid 29825] [client 104.199.223.72:59248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "terfgunclub.com"] [uri "/wp-config.php~"] [unique_id "apZylUJon79VavkgykLSPQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack