๐บ๐ธ
TPI-Abuse
2026-10-15 22:47:21
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 18:47:12.247901 2026] [security2:error] [pid 4511:tid 4511] [client 104.22.23.14:11700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qwixel.com"] [uri "/.env.save"] [unique_id "atFX8CcPpQE_GI-cR4en4wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-15 17:47:27
(12 hours ago)
[15/Oct/2026:20:47:26 +0300] -- 104.22.23.14 Ban reason: Scanner [CMS_GENERIC] | Request: GET /confi ...
show more
[15/Oct/2026:20:47:26 +0300] -- 104.22.23.14 Ban reason: Scanner [CMS_GENERIC] | Request: GET /config.php HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ธ๐ช
peterh
2026-10-15 15:58:00
(14 hours ago)
Brute-Force
Web App Attack
Phishing
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-15 14:17:11
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:16:58.790905 2026] [security2:error] [pid 32078:tid 32078] [client 104.22.23.14:11466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.osmanbozkurt.pist.org.tr"] [uri "/.env.dev"] [unique_id "atDgWiZMH13N1ePrwAQGMgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 13:45:48
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:45:42.162157 2026] [security2:error] [pid 31539:tid 31539] [client 104.22.23.14:10094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karturo.com"] [uri "/.env.dev"] [unique_id "atDZBuqDli6myhRflYo2pQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-15 13:06:03
(17 hours ago)
Trying to access config files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 10:50:44
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:50:12.695641 2026] [security2:error] [pid 14030:tid 14030] [client 104.22.23.14:13129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webersource.com"] [uri "/.env.save"] [unique_id "atCv5IBKjGFmyHAr1HBEdwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
vtchost.com
2026-10-15 09:54:07
(20 hours ago)
forbidden http request, scanning for weaknesses
...
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-15 09:08:41
(21 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-10-15 07:09:10
(23 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 04:22:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:22:27.021708 2026] [security2:error] [pid 24017:tid 24017] [client 104.22.23.14:9583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "printednapkins.com"] [uri "/.env.staging"] [unique_id "atBVA7zgQzc8aWyLTT49vgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-10-03 13:08:39
(1 week ago)
Web App Attack
๐ง๐ช
madeit
2026-09-23 06:46:59
(3 weeks ago)
Web App Attack
๐ง๐ช
madeit
2026-08-15 08:17:55
(2 months ago)
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-07-30 11:51:13
(2 months ago)
104.22.23.14 - - [30/Jul/2026:14:51:10 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 404 4726 ...
show more
104.22.23.14 - - [30/Jul/2026:14:51:10 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 404 4726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.22.23.14 - - [30/Jul/2026:14:51:12 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 789 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack