Anonymous
2026-09-20 07:45:58
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 84.233.199.164 (US/United States/unn-84 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 84.233.199.164 (US/United States/unn-84-233-199-164.datapacket.com)
show less
SQL Injection
π³π±
homeshowdomain.nl
2026-09-19 21:59:08
(1 day ago)
Auto-ban: >3000 req/min op 2026-09-19
Web App Attack
SSH
Hacking
πΊπΈ
TPI-Abuse
2026-09-19 19:10:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 15:10:34.804115 2026] [security2:error] [pid 10800:tid 10800] [client 84.233.199.164:54243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assec.org"] [uri "/.env/.env.bak"] [unique_id "aq7eKlTWedP47nTDBQDNrAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-19 18:56:38
(1 day ago)
Trying to access config files
Web App Attack
Anonymous
2026-09-19 18:08:27
(1 day ago)
(caddyscan) Scanner path probe from 84.233.199.164 (US/United States/unn-84-233-199-164.datapacket.c ...
show more
(caddyscan) Scanner path probe from 84.233.199.164 (US/United States/unn-84-233-199-164.datapacket.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 84.233.199.164 - - [19/Sep/2026:18:08:22 +0000] "GET /.env/.env.bak HTTP/1.1"
[REDACTED] 200 2627 84.233.199.164 - - [19/Sep/2026:18:08:22 +0000] "GET /.env/.env.bak HTTP/1.1"
[REDACTED] 200 2627 84.233.199.164 - - [19/Sep/2026:18:08:22 +0000] "GET /.env/.env.bak HTTP/1.1"
[REDACTED] 200 2627 84.233.199.164 - - [19/Sep/2026:18:08:22 +0000] "GET /.env/.env.bak HTTP/1.1"
[REDACTED] 200 2627 84.233.199.164 - - [19/Sep/2026:18:08:22 +0000] "GET /.env/.env.bak HTTP/1.1"
show less
Port Scan
πΊπΈ
TPI-Abuse
2026-09-19 17:52:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 13:52:08.467395 2026] [security2:error] [pid 26185:tid 26185] [client 84.233.199.164:62771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aschmidtconsulting.com"] [uri "/.env/.env.bak"] [unique_id "aq7LyEECV7PUTGaOIfNruwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
WeCloudit-Anti-Abuse
2026-09-19 13:09:45
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
πΊπΈ
TPI-Abuse
2026-09-19 10:41:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 06:41:29.068280 2026] [security2:error] [pid 501:tid 501] [client 84.233.199.164:51871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "app.oxfordgliding.com"] [uri "/.env/.env.bak"] [unique_id "aq5m2VlH4wZCx7Famd3nzgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-17 06:54:07
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 02:54:01.492076 2026] [security2:error] [pid 30112:tid 30112] [client 84.233.199.164:58337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "86mountaineers.net"] [uri "/.env/.env.bak"] [unique_id "aquOialEtkTokbURoIbeJwAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-17 05:54:07
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:54:02.401064 2026] [security2:error] [pid 10407:tid 10407] [client 84.233.199.164:53384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4dbm.com"] [uri "/.env/.env.bak"] [unique_id "aquAeib0UBhoioqiLCPssAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-17 03:41:37
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:41:33.068643 2026] [security2:error] [pid 375:tid 375] [client 84.233.199.164:57142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "495metro.com"] [uri "/.env/.env.bak"] [unique_id "aqthbYgL-KV86UHI7_areQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-17 03:09:18
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:09:12.612882 2026] [security2:error] [pid 25987:tid 25987] [client 84.233.199.164:49927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4ehardware.com"] [uri "/.env/.env.bak"] [unique_id "aqtZ2CaRT1EuFUFScxoq2gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-17 02:07:04
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:06:55.807824 2026] [security2:error] [pid 14189:tid 14264] [client 84.233.199.164:50636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3stepreviewforyou.com"] [uri "/.env/.env.bak"] [unique_id "aqtLPwJSxVCmEq0OjZyFdwAAAhE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-17 00:30:33
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 84.233.199.164 (unn-84-233-199-164.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:30:27.728401 2026] [security2:error] [pid 13132:tid 13132] [client 84.233.199.164:58311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3dworld-wide.com"] [uri "/.env/.env.bak"] [unique_id "aqs0o-npyjpPj3ZEsBHQ6gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
8legz.net
2026-09-16 21:22:37
(4 days ago)
[Wed Sep 16 22:22:27.913178 2026] [php:error] [pid 2441072] [client 84.233.199.164:54183] script '/v ...
show more
[Wed Sep 16 22:22:27.913178 2026] [php:error] [pid 2441072] [client 84.233.199.164:54183] script '/var/www/html/phpinfo.php' not found or unable to stat
[Wed Sep 16 22:22:29.705705 2026] [php:error] [pid 2445945] [client 84.233.199.164:59302] script '/var/www/html/test.php' not found or unable to stat
[Wed Sep 16 22:22:36.896661 2026] [php:error] [pid 2441083] [client 84.233.199.164:49660] script '/var/www/html/index.php' not found or unable to stat
...
show less
Brute-Force