🇫🇷
SpaceHost-Server
2026-09-04 22:23:57
(1 day ago)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-04 22:02:24
(1 day ago)
Auto-ban: >3000 req/min op 2026-09-04
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-04 15:20:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:20:52.593737 2026] [security2:error] [pid 13052:tid 13052] [client 8.234.218.106:52368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.westonfuller.com"] [uri "/.env.bak"] [unique_id "aprh1E0sGEa6xrQM4tc59gAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:43:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:43:03.343243 2026] [security2:error] [pid 12096:tid 12096] [client 8.234.218.106:39804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schelske.us"] [uri "/.env.bak"] [unique_id "aprY91UTVLfZ5ZfQzxs1WQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-04 14:10:46
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-09-04 13:26:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:26:02.164404 2026] [security2:error] [pid 32028:tid 32028] [client 8.234.218.106:44036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srossi.themotelwest.com"] [uri "/wp-config.php.swp"] [unique_id "aprG6lWCbbDodx8UMl4DFgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 13:07:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:07:00.797089 2026] [security2:error] [pid 24917:tid 24917] [client 8.234.218.106:59676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabbathseminars.net"] [uri "/.env.production"] [unique_id "aprCdBBLbadaNa98VI89QQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-04 12:55:24
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇦🇺
AWW-Admin
2026-09-04 12:34:53
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 8.234.218.106 (US/United States/106.218 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 8.234.218.106 (US/United States/106.218.234.8.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
FD-IX
2026-09-04 12:28:03
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-04 11:52:34
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 8.234.218.106 (US/United States/106.218.234.8.b ...
show more
(mod_security) mod_security (id:949110) triggered by 8.234.218.106 (US/United States/106.218.234.8.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:48:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:48:14.794973 2026] [security2:error] [pid 32427:tid 32427] [client 8.234.218.106:43520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.aspotoftea.com"] [uri "/wp-config.php.bak"] [unique_id "apqv_lQeC7Sh324fO3JRfwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-04 10:38:43
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:16:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:16:52.339046 2026] [security2:error] [pid 1062:tid 1062] [client 8.234.218.106:52524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boardingatthewedge.com"] [uri "/.env.bak"] [unique_id "apqalOlhtchqtBe1JrAODQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:18:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.218.106 (106.218.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:18:48.385833 2026] [security2:error] [pid 455:tid 455] [client 8.234.218.106:48422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kitchen.pizzadata.com"] [uri "/.env"] [unique_id "apqM-B8cauaZnMaGTWDuKQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack