🇺🇸
TPI-Abuse
2026-07-16 11:43:05
(2 minutes ago)
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 07:42:59.829894 2026] [security2:error] [pid 7085:tid 7085] [client 196.74.174.30:59479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rallentarecg.com"] [uri "/.env"] [unique_id "aljDw1OFMsZq_WyHfLHB1QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-07-16 10:36:58
(1 hour ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 10:35:35
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:35:30.516438 2026] [security2:error] [pid 28620:tid 28620] [client 196.74.174.30:61399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "femalegamblers.mobileonlinecasinos.co"] [uri "/.env"] [unique_id "aliz8uJnDMD_KOHcDYvNDwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
srebrakowski.com
2026-07-16 09:47:12
(1 hour ago)
crowdsec/waf-detected-exploits
Brute-Force
🇳🇱
e.fierstra
2026-07-16 09:46:40
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-07-16 09:45:49
(2 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇩🇪
IVski
2026-07-16 09:36:09
(2 hours ago)
IVski WAF | Sensitive file probe detected - looking for .env
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 09:34:42
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 05:34:38.870092 2026] [security2:error] [pid 5832:tid 5832] [client 196.74.174.30:55248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raaksystems.com"] [uri "/.env"] [unique_id "alilru48zOK2HPbWIqjypgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jfz-abuse
2026-07-16 08:49:21
(2 hours ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
n2nguyenn2nguyen
2026-07-16 08:39:37
(3 hours ago)
Blocked by YFC Security on https://fencingforward.com — type: directory_scan_attempts
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 08:38:47
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 04:38:42.403659 2026] [security2:error] [pid 24036:tid 24036] [client 196.74.174.30:53423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "therhclan.com"] [uri "/.env"] [unique_id "aliYkqeC4z6hf83fznSB7AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 07:36:26
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 03:36:18.601022 2026] [security2:error] [pid 30129:tid 30129] [client 196.74.174.30:62894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rheemhvac.com"] [uri "/.env"] [unique_id "aliJ8lhvBrXvhzHwyY6cbQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 06:40:37
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 196.74.174.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:40:29.363570 2026] [security2:error] [pid 4131:tid 4131] [client 196.74.174.30:49227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.healthy4youllc.starrmail.net"] [uri "/.env"] [unique_id "alh83XmYpdRAb1wAuWYjTgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-07-16 05:48:00
(5 hours ago)
196.74.174.30 Probing protected path or service
Web App Attack
🇫🇷
masterguru
2026-07-16 05:40:33
(6 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack