🇲🇽
octageeks.com
2026-07-07 04:11:33
(3 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇯🇵
beon
2026-07-07 01:53:19
(3 days ago)
[DateTime=>2026-07-07T01:53:19Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/.env] , [total_Hit=>once ...
show more
[DateTime=>2026-07-07T01:53:19Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/.env] , [total_Hit=>once]
show less
Bad Web Bot
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-07 00:15:38
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 20:15:33.410671 2026] [security2:error] [pid 24355:tid 24355] [client 104.234.208.147:49557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.apexandroids.com"] [uri "/.env"] [unique_id "akxFJVhQjNeZydKa8CBoYgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 23:38:34
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:38:27.003981 2026] [security2:error] [pid 19893:tid 19893] [client 104.234.208.147:52125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hamiltoncountyuca.org"] [uri "/.env"] [unique_id "akw8c2LaTLo2o2M70zxnqAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 23:12:22
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:12:14.857128 2026] [security2:error] [pid 25892:tid 25892] [client 104.234.208.147:48279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertedge.band"] [uri "/.env"] [unique_id "akw2TiuM3qS2rxLQ0f9h3QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-06 21:33:27
(4 days ago)
Multiple WAF Violations
Web App Attack
🇩🇪
Bedios GmbH
2026-07-06 17:51:58
(4 days ago)
Login credentials theft attempt
Hacking
🇺🇸
Lee Daniel
2026-07-06 15:41:53
(4 days ago)
104.234.208.147 - - [06/Jul/2026:11:41:52 -0400] "GET /.env HTTP/1.1" 403 4735 "-" "Mozilla/5.0 (Mac ...
show more
104.234.208.147 - - [06/Jul/2026:11:41:52 -0400] "GET /.env HTTP/1.1" 403 4735 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 12:51:46
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 08:51:39.306342 2026] [security2:error] [pid 12397:tid 12397] [client 104.234.208.147:31879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelsabbey.com"] [uri "/.env"] [unique_id "akuk27NLSHiDyblB8LrlgwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 11:34:20
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 07:34:15.920715 2026] [security2:error] [pid 537:tid 537] [client 104.234.208.147:63723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cherryblossomplayers.com"] [uri "/.env"] [unique_id "akuSt6XeuB53Fffx49mXFgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 10:36:01
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:35:57.635492 2026] [security2:error] [pid 11661:tid 11661] [client 104.234.208.147:20385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "consultnv.com"] [uri "/.env"] [unique_id "akuFDVMRRz7zZs5Y9M4XAAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 10:20:24
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:20:18.934675 2026] [security2:error] [pid 14099:tid 14099] [client 104.234.208.147:52767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "berlatinc.com"] [uri "/.env"] [unique_id "akuBYt_aLZ8vhtBrIviZOQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
HostingGroup
2026-07-06 09:41:53
(4 days ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-07-06.
show less
Bad Web Bot
Web App Attack
🇩🇪
kommunos
2026-07-06 09:31:12
(4 days ago)
/.env
Web App Attack
🇺🇸
Matthew Ping
2026-07-06 08:15:02
(4 days ago)
ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking