🇺🇸
TPI-Abuse
2026-06-15 00:57:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:57:24.885018 2026] [security2:error] [pid 17169:tid 17169] [client 104.234.208.199:61247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "archaiusmusic.com"] [uri "/.env"] [unique_id "ai9N9Gc9ZdIzN_gdNc7fKgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-15 00:19:00
(1 week ago)
Scanning/Probing (30)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 22:58:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:58:47.885748 2026] [security2:error] [pid 29064:tid 29064] [client 104.234.208.199:34217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelwakim.com"] [uri "/.env"] [unique_id "ai8yJwTb_mLG0-k1Le-9SQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:12:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:12:53.655779 2026] [security2:error] [pid 23760:tid 23760] [client 104.234.208.199:53505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fatlandtheplay.com"] [uri "/.env"] [unique_id "ai8ZVawNeWtKVxbIaZ4YngAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-06-14 19:32:49
(1 week ago)
Honeypot access: Environment file access attempt. Path: /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 18:00:26
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 14:00:10.314424 2026] [security2:error] [pid 8092:tid 8092] [client 104.234.208.199:49553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cheynans.com"] [uri "/.env"] [unique_id "ai7sKocgsxd2TEgW3paogAAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 14:44:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 10:44:08.605622 2026] [security2:error] [pid 21642:tid 21642] [client 104.234.208.199:40987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clearlightcarwash.com"] [uri "/.env"] [unique_id "ai6-OOnCpxm9lo2b0l5e5wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 13:13:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 09:13:24.312331 2026] [security2:error] [pid 21389:tid 21389] [client 104.234.208.199:56185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corstratinc.com"] [uri "/.env"] [unique_id "ai6o9G1hR676Hxrd23aB4wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 11:59:37
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 07:59:29.309604 2026] [security2:error] [pid 1923:tid 1923] [client 104.234.208.199:50315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boardingatthewedge.com"] [uri "/.env"] [unique_id "ai6XoaHSxDcLNLtuesk-9AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 11:23:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 07:23:45.722009 2026] [security2:error] [pid 11667:tid 11667] [client 104.234.208.199:61435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srossi.net"] [uri "/.env"] [unique_id "ai6PQbzHHpj5bVIRo0YnUAAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 08:04:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 04:04:55.081314 2026] [security2:error] [pid 30810:tid 30810] [client 104.234.208.199:45909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andy-blakk.org"] [uri "/.env"] [unique_id "ai5gp2yDEM7I2Lx2HyG-JAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 05:08:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:08:31.635522 2026] [security2:error] [pid 10460:tid 10460] [client 104.234.208.199:45503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riversidecabinswv.com"] [uri "/.env"] [unique_id "ai43T0CBwcnxJ4gxJ1DSNAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-06-14 04:17:58
(1 week ago)
L0ss Honeypot: Environment file access attempt. Path: /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 03:40:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:40:16.673498 2026] [security2:error] [pid 25090:tid 25090] [client 104.234.208.199:46641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alafiariverrendezvous.org"] [uri "/.env"] [unique_id "ai4ioAw-dfcQA0eV-7R1UAAAAF0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 03:04:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.208.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:04:55.440772 2026] [security2:error] [pid 21028:tid 21028] [client 104.234.208.199:21095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelting.net"] [uri "/.env"] [unique_id "ai4aV4GHalGI0e0HWCAa2gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack