🇪🇸
librebit
2026-05-17 03:55:01
(4 weeks ago)
Brute force
Brute-Force
2026-03-19 05:21:08
(2 months ago)
Forum/form spam
Web Spam
🇦🇺
oncord
2026-02-23 21:32:14
(3 months ago)
Form spam
Web Spam
🇺🇸
mnsf
2026-02-18 04:05:18
(3 months ago)
Too many Status 40X (11)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 03:39:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:39:15.983857 2026] [security2:error] [pid 195138:tid 195143] [client 104.207.42.213:14357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rmoeis.com"] [uri "/admin/.env"] [unique_id "aZU0Y84RuyaxYGIf0CT68gAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2026-02-14 04:52:49
(4 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /api/.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /api/.env]
show less
Hacking
Web App Attack
🇺🇸
oncord
2026-02-13 11:11:38
(4 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-13 07:51:37
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:51:30.736944 2026] [security2:error] [pid 7644:tid 7644] [client 104.207.42.213:11753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kylight.net"] [uri "/.env.staging"] [unique_id "aY7YAuAZkKe2_Lw7PEPwyQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:02:34
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:02:29.484991 2026] [security2:error] [pid 29762:tid 29762] [client 104.207.42.213:41231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kooroshvaziri.com"] [uri "/backend/.env"] [unique_id "aY6-dXL5qJl-zGlwOx3VkwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:08:01
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:07:53.911734 2026] [security2:error] [pid 17361:tid 17361] [client 104.207.42.213:21449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingfish.bet"] [uri "/app/.git/config"] [unique_id "aY6jmfnyPOV0zPbXNoc7xwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:30:09
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:30:02.019980 2026] [security2:error] [pid 1165800:tid 1165800] [client 104.207.42.213:43573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelticdreamsranch.com"] [uri "/.env"] [unique_id "aY6Mqqj70lvhVunMyjNOlwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:04:20
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:04:17.059949 2026] [security2:error] [pid 29587:tid 29587] [client 104.207.42.213:24821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kclawoffice.com"] [uri "/dev/.git/config"] [unique_id "aY6GoXpaSC39QUTHfix9dwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-12 22:59:55
(4 months ago)
Auto-ban: >3000 req/min op 2026-02-12
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-12 20:55:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 15:55:36.127830 2026] [security2:error] [pid 23259:tid 23259] [client 104.207.42.213:46835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brupharm.net"] [uri "/.env"] [unique_id "aY4-SOqlYqRvr6TV9Lv1fgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 17:36:05
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:35:59.106215 2026] [security2:error] [pid 1990763:tid 1990763] [client 104.207.42.213:35265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billthompsons.com"] [uri "/.env"] [unique_id "aY4Pf64-l5CFL0CzX6tCeQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack