🇺🇸
TPI-Abuse
2026-07-16 19:54:28
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 15:54:23.685995 2026] [security2:error] [pid 4132:tid 4132] [client 8.218.87.143:31456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxurymicrobikini.com"] [uri "/.env.production"] [unique_id "alk271Xw6oWbmOJHT_QG7AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 19:27:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 15:27:08.970629 2026] [security2:error] [pid 4362:tid 4391] [client 8.218.87.143:52616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jameskeeton.com"] [uri "/.env.example"] [unique_id "alkwjIciETQbMaxWf9JzwwAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 18:56:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:55:58.666946 2026] [security2:error] [pid 20470:tid 20470] [client 8.218.87.143:43546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.astglobal.com.greenlight.us"] [uri "/.env"] [unique_id "alkpPjMpAnw99pMbKbLEnAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-16 18:25:58
(1 day ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 18:12:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:12:44.414441 2026] [security2:error] [pid 30114:tid 30114] [client 8.218.87.143:21992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kraftrealestate.kraftrentals.com"] [uri "/frontend/.env"] [unique_id "alkfHHAnrE6WGwM2yat-DAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 17:54:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:54:00.782012 2026] [security2:error] [pid 31623:tid 31623] [client 8.218.87.143:34591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.taller.verdeprofundo.net"] [uri "/.env.production"] [unique_id "alkauPWFuFUi6ICMpNKxQAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 17:34:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:33:39.431932 2026] [security2:error] [pid 15001:tid 15001] [client 8.218.87.143:27699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californiaappraisers.net"] [uri "/.env.dev"] [unique_id "alkV81i9vRO27zGy2cJdsQAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-16 17:23:06
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 17:04:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:04:14.180462 2026] [security2:error] [pid 25879:tid 25879] [client 8.218.87.143:1752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luvmypuggle.com"] [uri "/storage/framework/.env"] [unique_id "alkPDuKlQ1qaRi5wUArkYAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Lee Daniel
2026-07-16 16:54:22
(1 day ago)
8.218.87.143 - - [16/Jul/2026:12:54:06 -0400] "GET /credentials.json HTTP/1.1" 404 27132 "-" "Mozill ...
show more
8.218.87.143 - - [16/Jul/2026:12:54:06 -0400] "GET /credentials.json HTTP/1.1" 404 27132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)"
8.218.87.143 - - [16/Jul/2026:12:54:07 -0400] "GET /cdp_api_key.json HTTP/1.1" 404 27132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)"
8.218.87.143 - - [16/Jul/2026:12:54:20 -0400] "GET /settings.py HTTP/1.1" 404 27107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)"
8.218.87.143 - - [16/Jul/2026:12:54:21 -0400] "GET /config.py HTTP/1.1" 404 27097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silv
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 16:42:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:41:41.427907 2026] [security2:error] [pid 11127:tid 11127] [client 8.218.87.143:4372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanexportimport.com"] [uri "/.env.staging"] [unique_id "alkJxetY2hZRIOCZSPgFwwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Starburst SysOp Team
2026-07-16 16:27:13
(1 day ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-iad5-2)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 16:08:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:08:05.542002 2026] [security2:error] [pid 11181:tid 11196] [client 8.218.87.143:36664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globaldental.mcprocapital.com"] [uri "/.env.old"] [unique_id "alkB5XL3ChtI48MPNkctDgAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-16 15:50:02
(1 day ago)
| [Dangerous/Hong Kong] Aggressive IP 8.218.87.143 (~30 hits). Type: DoS Defender- Web server 400 er ...
show more
| [Dangerous/Hong Kong] Aggressive IP 8.218.87.143 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-07-16 15:49:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 8.218.87.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 11:44:03.068864 2026] [security2:error] [pid 10743:tid 10743] [client 8.218.87.143:36538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.autowinderband.tremulant.com"] [uri "/.env.prod"] [unique_id "alj8QzBsEMT5r_HZUIh8SgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack