🇩🇪
webanyone
2026-07-03 03:00:42
(3 hours ago)
Apache web server attack detected by Fail2Ban in plesk-apache jail
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 02:24:48
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:24:42.781697 2026] [security2:error] [pid 28094:tid 28094] [client 105.157.84.163:65265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hecticred.com"] [uri "/.env"] [unique_id "akcdaqEDd2YmK-lm_n93QQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 02:09:36
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:09:30.212644 2026] [security2:error] [pid 27979:tid 27979] [client 105.157.84.163:57977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heartshapedboy.com"] [uri "/.env"] [unique_id "akcZ2s9FBtu_GMXj7PmD7gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 01:02:54
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 21:02:48.535933 2026] [security2:error] [pid 16763:tid 16763] [client 105.157.84.163:63839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hayrun.com"] [uri "/.env"] [unique_id "akcKOC2xp0bx6JoDY7yR8wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 00:44:27
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 20:44:22.785982 2026] [security2:error] [pid 4589:tid 4589] [client 105.157.84.163:57205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "havenlaneministries.com"] [uri "/.env"] [unique_id "akcF5ir92Es1HUSjFrl4uQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 00:10:45
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 20:10:37.675147 2026] [security2:error] [pid 531:tid 531] [client 105.157.84.163:50703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harrygant.com"] [uri "/.env"] [unique_id "akb9_eq_uxfqfp0_Lg0bmwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 23:51:25
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:51:19.554766 2026] [security2:error] [pid 4142:tid 4142] [client 105.157.84.163:60047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hardcountryrock.com"] [uri "/.env"] [unique_id "akb5d9vLxgKNl_LWJamJkQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Lee Daniel
2026-07-02 23:49:45
(6 hours ago)
105.157.84.163 - - [02/Jul/2026:19:49:44 -0400] "GET /.env HTTP/1.1" 403 6314 "-" "Mozilla/5.0 (Linu ...
show more
105.157.84.163 - - [02/Jul/2026:19:49:44 -0400] "GET /.env HTTP/1.1" 403 6314 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 8) AppleWebKit/537.36 Chrome/125.0.0.0 Mobile Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
2026-07-02 23:33:03
(7 hours ago)
Bot / scanning and/or hacking attempts: GET /phpinfo.php HTTP/2.0, GET /.env HTTP/2.0, [0/0] done, G ...
show more
Bot / scanning and/or hacking attempts: GET /phpinfo.php HTTP/2.0, GET /.env HTTP/2.0, [0/0] done, GET /test.php HTTP/1.1, GET /.env HTTP/1.1
show less
Hacking
Web App Attack
2026-07-02 23:05:04
(7 hours ago)
Blocked: Reason='Suspicious traffic score=70 (review-based detection)'; Requests=8
Hacking
🇺🇸
TPI-Abuse
2026-07-02 22:48:45
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:48:38.763321 2026] [security2:error] [pid 27867:tid 27867] [client 105.157.84.163:63729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hanabritgermanshepherds.com"] [uri "/.env"] [unique_id "akbqxqxWIjRsX_6-SKYhiAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 22:31:42
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:31:36.755708 2026] [security2:error] [pid 20980:tid 20980] [client 105.157.84.163:62578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "halotoys.com"] [uri "/.env"] [unique_id "akbmyJ8V2R3nymoAiEdFlQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 22:13:59
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:13:51.505533 2026] [security2:error] [pid 20822:tid 20822] [client 105.157.84.163:55794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hakkawok.com"] [uri "/.env"] [unique_id "akbin2nVnEoGQfleKiP4SQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 20:26:07
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:26:01.759595 2026] [security2:error] [pid 10568:tid 10568] [client 105.157.84.163:51186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gurusportz.com"] [uri "/.env"] [unique_id "akbJWZSJKkV9OwHBgj6mpQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 20:00:12
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 105.157.84.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:00:07.225693 2026] [security2:error] [pid 17008:tid 17012] [client 105.157.84.163:62522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guitarprimer.com"] [uri "/.env"] [unique_id "akbDRzPytMKDi4tUPBBClAAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack