🇺🇸
TPI-Abuse
2026-02-15 12:47:51
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:47:45.318179 2026] [security2:error] [pid 17541:tid 17541] [client 104.207.55.90:32345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toddgoranson.com"] [uri "/backend/.env"] [unique_id "aZHAcSxMoyvx1iYvyAm9jQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-02-15 12:31:04
(3 months ago)
Try to access /api/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 12:23:24
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:23:18.529562 2026] [security2:error] [pid 6476:tid 6476] [client 104.207.55.90:26089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tipwhisperings.com"] [uri "/backend/.env"] [unique_id "aZG6tgeZ9TEQweg3DfuikgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-15 12:13:48
(3 months ago)
Blocking for trying to access an exploit file: /.env.local
Hacking
🇺🇸
TPI-Abuse
2026-02-15 12:05:01
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:04:56.937056 2026] [security2:error] [pid 2815655:tid 2815655] [client 104.207.55.90:63403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tigerpathteam.org"] [uri "/config/.env"] [unique_id "aZG2aKrcmt5ko_L2D9FhjwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:15:47
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:15:40.606487 2026] [security2:error] [pid 2170:tid 2255] [client 104.207.55.90:30711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "straight8inc.com"] [uri "/test/.git/config"] [unique_id "aZFIbGK04aBCi-tiI-BS7QAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:52:51
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:52:46.317677 2026] [security2:error] [pid 29604:tid 29604] [client 104.207.55.90:49217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stewarttaylor.com"] [uri "/api/.git/config"] [unique_id "aZFDDtCkJg3yTp2jLRWOugAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 02:53:47
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:53:40.162162 2026] [security2:error] [pid 29199:tid 29199] [client 104.207.55.90:10289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nancy-whittington.com"] [uri "/config/.env"] [unique_id "aZE1NNNMYMlLl_bhsujaEAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-02-15 02:19:37
(3 months ago)
http-sensitive-files - IP: 104.207.55.90 - time="2026-02-15T03:19:37+01:00" level=info msg="(555f66 ...
show more
http-sensitive-files - IP: 104.207.55.90 - time="2026-02-15T03:19:37+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.55.90 (DE/200373) : 4h ban on Ip 104.207.55.90" module=db
show less
Web App Attack
🇺🇸
mnsf
2026-02-15 02:05:53
(3 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 01:38:37
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:38:33.118809 2026] [security2:error] [pid 4692:tid 4692] [client 104.207.55.90:15883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mvpbees.com"] [uri "/wp/.git/config"] [unique_id "aZEjmRhIpMwK4KsMGStLzAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 00:53:39
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:53:32.220116 2026] [security2:error] [pid 27547:tid 27547] [client 104.207.55.90:41407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lumentravel.com"] [uri "/app/.env"] [unique_id "aZEZDAQVS8Nmjm2VIau6WwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 00:12:15
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:12:08.089889 2026] [security2:error] [pid 23317:tid 23317] [client 104.207.55.90:15505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "losbarbarosdelnorte.com"] [uri "/frontend/.env"] [unique_id "aZEPWJ4u33AhERYq4Y5f_AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 23:20:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 18:20:10.838848 2026] [security2:error] [pid 303:tid 341] [client 104.207.55.90:63527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livingalegacybulldogges.com"] [uri "/.env.staging"] [unique_id "aZEDKuTjh-Dl8pGktnWWdgAAANU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 22:57:22
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.55.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:57:15.982658 2026] [security2:error] [pid 12016:tid 12016] [client 104.207.55.90:26837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mosherpit.com"] [uri "/.env.production"] [unique_id "aZD9y1LE7klHeeWL7BB5BwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack