๐ง๐ช
madeit
2026-10-03 20:24:09
(4 days ago)
Web App Attack
๐น๐ท
ScchutzZ
2026-09-29 14:05:13
(1 week ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
๐ง๐ช
madeit
2026-09-26 15:23:17
(1 week ago)
Web App Attack
๐ง๐ช
madeit
2026-08-18 01:17:55
(1 month ago)
Web App Attack
๐ธ๐ฌ
celestialcity
2026-05-25 00:37:37
(4 months ago)
Blocked by UFW on celestialcityas [2087/tcp] | SPT: 14073 | TTL: 46 | LEN: 60 | TOS: 0x04 โข Reported ...
show more
Blocked by UFW on celestialcityas [2087/tcp] | SPT: 14073 | TTL: 46 | LEN: 60 | TOS: 0x04 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-04-22 16:32:56
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 12:32:48.546330 2026] [security2:error] [pid 758:tid 758] [client 104.23.253.86:14319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.orientaltb.com"] [uri "/.env.save"] [unique_id "aej4MEyzU_7rLbNFatLYRgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 12:51:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 08:51:16.403240 2026] [security2:error] [pid 4031:tid 4031] [client 104.23.253.86:9299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.carjinn.net"] [uri "/site/.env"] [unique_id "adEJRC3DcAMXZUBTL-dGPAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 03:19:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 23:19:26.410438 2026] [security2:error] [pid 13337:tid 13337] [client 104.23.253.86:14252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.whaletailpuckerbutt.com"] [uri "/.env.dev"] [unique_id "adCDPtZeygz0mnja-jIwkgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
LotPhantom
2026-03-30 19:19:12
(6 months ago)
2026/03/30 19:19:11 [error] 109152#109152: *62789 access forbidden by rule, client: 104.23.253.86, s ...
show more
2026/03/30 19:19:11 [error] 109152#109152: *62789 access forbidden by rule, client: 104.23.253.86, server: api.bridginggaps.tech, request: "GET /.git/index HTTP/2.0", host: "api.bridginggaps.tech"
...
show less
Web App Attack
๐บ๐ธ
mnsf
2026-03-30 01:06:49
(6 months ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 01:03:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:03:51.952485 2026] [security2:error] [pid 4616:tid 4616] [client 104.23.253.86:10803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kmnr.net"] [uri "/home/.env"] [unique_id "ab3ud61tJeXdwPiygwsLEQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-03-21 00:19:44
(6 months ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 09:33:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:33:49.944836 2026] [security2:error] [pid 22224:tid 22224] [client 104.23.253.86:13893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bizzybeejunkremoval.com"] [uri "/.env.production"] [unique_id "ab0UfS3JrCY2nhTlTEIuvgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 08:32:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 04:32:34.973459 2026] [security2:error] [pid 27502:tid 27502] [client 104.23.253.86:13152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stern2.darkhorseyachting.com"] [uri "/core/.env"] [unique_id "ab0GIhBD8RuVXdUd9FrIfwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 07:19:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.253.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:18:52.175079 2026] [security2:error] [pid 2724:tid 2724] [client 104.23.253.86:10448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.grabnerconsulting.com"] [uri "/.env.prod"] [unique_id "abz03NTf7E8-QZ8ll1qJYQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
