🇫🇷
bigorre.org
2026-05-30 13:48:48
(1 month ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-05-28 22:05:32
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-27.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-28 01:24:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 21:24:24.600257 2026] [security2:error] [pid 17449:tid 17449] [client 104.253.90.123:57649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruralroutes.ca"] [uri "/.env.vercel"] [unique_id "aheZSKYsKlevf4MmVwXvfQAAABI"], referer: https://www.google.com/search?q=ruralroutes.ca
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-27 22:01:45
(1 month ago)
Auto-ban: >3000 req/min op 2026-05-27
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-27 17:43:24
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 13:43:16.757735 2026] [security2:error] [pid 4736:tid 4736] [client 104.253.90.123:34005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gisur.com"] [uri "/.env.vercel"] [unique_id "ahctNLnrpxLblXzkoaaQwAAAAEE"], referer: https://www.google.com/search?q=gisur.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 00:57:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:57:12.722657 2026] [security2:error] [pid 19557:tid 19557] [client 104.253.90.123:55877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.johnlittlehorn.littlehorndesign.com"] [uri "/.env.development.local"] [unique_id "ahZBaIk7n9Dyb6vGUpklNgAAABw"], referer: https://www.google.com/search?q=www.johnlittlehorn.littlehorndesign.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 00:31:57
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:31:46.946222 2026] [security2:error] [pid 24454:tid 24454] [client 104.253.90.123:55721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gapanda.com"] [uri "/wp-config.php.swp"] [unique_id "ahY7clXgpw30RrqWceiuswAAAAA"], referer: https://www.google.com/search?q=mail.gapanda.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 17:57:44
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.253.90.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 13:57:08.068855 2026] [security2:error] [pid 28798:tid 28798] [client 104.253.90.123:33907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.l3prime.systemcapacityoptimization.com"] [uri "/.env.save"] [unique_id "ahXe9KyfXw948oEf3GJ6KQAAAB0"], referer: https://www.google.com/search?q=www.l3prime.systemcapacityoptimization.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
BridgeBurner
2025-09-02 07:37:24
(10 months ago)
Layer 7 DDoS with Cloudflare Under Attack Mode Bypass
DDoS Attack