🇲🇽
octageeks.com
2026-07-07 04:18:48
(1 week ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
lnklnx
2026-07-07 04:03:12
(1 week ago)
www.rcmeal.com:80 104.234.208.145 - - [06/Jul/2026:23:03:03 -0500] "GET /.env HTTP/1.1" 301 615 "-" ...
show more
www.rcmeal.com:80 104.234.208.145 - - [06/Jul/2026:23:03:03 -0500] "GET /.env HTTP/1.1" 301 615 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 00:32:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 20:32:12.912868 2026] [security2:error] [pid 21760:tid 21760] [client 104.234.208.145:29799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abramczuk.me"] [uri "/.env"] [unique_id "akxJDBdm59pb6uBk2Jo0jwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 00:16:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 20:16:54.717467 2026] [security2:error] [pid 31954:tid 31954] [client 104.234.208.145:35513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigbandrockparty.com"] [uri "/.env"] [unique_id "akxFdqnlaSyLupH4Rw9mzQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 23:09:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:09:13.142210 2026] [security2:error] [pid 17526:tid 17526] [client 104.234.208.145:26355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "berksoft.com"] [uri "/.env"] [unique_id "akw1mcueR2dDuReJHOcZzAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-06 22:32:01
(1 week ago)
[Tue Jul 07 08:32:00.799458 2026] [security2:error] [pid 166229] [client 104.234.208.145:23207] [cli ...
show more
[Tue Jul 07 08:32:00.799458 2026] [security2:error] [pid 166229] [client 104.234.208.145:23207] [client 104.234.208.145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stkildashule.org.au"] [uri "/.env"] [unique_id "akws4MhaKZdDWSf6yw_bnAAAAAE"]
...
show less
Web App Attack
🇫🇷
dynamix
2026-07-06 21:43:39
(1 week ago)
Multiple WAF Violations
Web App Attack
🇳🇱
MM-bot
2026-07-06 17:05:48
(1 week ago)
URL-probe: HTTP/1.1 GET request on /.env (2026-07-06 19:05:48 UTC+2)
Web App Attack
Hacking
2026-07-06 16:36:02
(1 week ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
Lee Daniel
2026-07-06 15:40:42
(1 week ago)
104.234.208.145 - - [06/Jul/2026:11:40:41 -0400] "GET /.env HTTP/1.1" 403 4817 "-" "Mozilla/5.0 (Mac ...
show more
104.234.208.145 - - [06/Jul/2026:11:40:41 -0400] "GET /.env HTTP/1.1" 403 4817 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-07-06 14:26:47
(1 week ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2026-07-06 13:30:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 09:30:12.392441 2026] [security2:error] [pid 20032:tid 20032] [client 104.234.208.145:52341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "impressionsinthread.com"] [uri "/.env"] [unique_id "akut5AJtii2XIFf1L48m0wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 12:44:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 08:44:10.116956 2026] [security2:error] [pid 5673:tid 5673] [client 104.234.208.145:30981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "consorciolegal.com"] [uri "/.env"] [unique_id "akujGroe_-1JTJzWpTv_3QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 11:30:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 07:30:42.035601 2026] [security2:error] [pid 1401:tid 1401] [client 104.234.208.145:58393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aeservices.com"] [uri "/.env"] [unique_id "akuR4qAa0uKjHupou4WXBQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 10:56:01
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:55:55.049879 2026] [security2:error] [pid 4490:tid 4490] [client 104.234.208.145:29959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.67ronin.com"] [uri "/.env"] [unique_id "akuJu-hCpz46E0ZOS6Y2UgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack