🇺🇸
TPI-Abuse
2026-07-30 14:11:30
(26 minutes ago)
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 10:11:26.166653 2026] [security2:error] [pid 1264468:tid 1264468] [client 89.149.226.224:48358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "415test.com"] [uri "/.env"] [unique_id "amtbjp4ghWQI6Nn6hxsmkQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 09:26:29
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 05:26:24.415725 2026] [security2:error] [pid 292564:tid 292564] [client 89.149.226.224:57270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "40svocaltrio.com"] [uri "/.env"] [unique_id "amsYwDz-kns8BOtuzE3IawAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-07-30 09:13:07
(5 hours ago)
[ThuJul3011:13:02.6351912026][security2:error][pid1914687:tid1915006][client89.149.226.224:0]ModSecu ...
show more
[ThuJul3011:13:02.6351912026][security2:error][pid1914687:tid1915006][client89.149.226.224:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"4-server.com\"][uri\"/.env\"][unique_id\"amsVnrzQBRbQ28OItyVkwAAAAQ4\"]
show less
Hacking
Web App Attack
🇩🇰
HostingGroup
2026-07-30 09:01:55
(5 hours ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 2. First blocked: 2026-07-30.
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-07-30 07:58:50
(6 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.tech | URI: /.env | UA: Mozilla/5.0 (compatible; msp-domainmon/1.0) | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇺🇸
rdpguard.com
2026-07-30 06:45:12
(7 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2026-07-30 06:37:41
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 02:37:36.566795 2026] [security2:error] [pid 1001044:tid 1001044] [client 89.149.226.224:58766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3fabgals.com"] [uri "/.env"] [unique_id "amrxMK9ExTLVAlJ8JtXRywAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dtorrer
2026-07-30 06:16:30
(8 hours ago)
General vulnerability scan.
Port Scan
🇩🇪
grassau.com
2026-07-30 06:09:36
(8 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 89.149.226.224 (NL/The Netherlands/-/-/ ...
show more
(mod_security) mod_security triggered on hostname [redacted] 89.149.226.224 (NL/The Netherlands/-/-/hosted-by.hostdzire.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-07-30 05:16:27
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 01:16:23.746638 2026] [security2:error] [pid 755150:tid 755150] [client 89.149.226.224:41990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "365m4.com"] [uri "/.env"] [unique_id "amreJ_f08eqppJewfgdNMgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-07-30 04:41:37
(9 hours ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 89.149.226.224 (hosted-b ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 89.149.226.224 (hosted-by.hostdzire.com)
show less
Port Scan
🇩🇪
Ba-Yu
2026-07-30 04:30:38
(10 hours ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 04:20:21
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 00:20:13.161957 2026] [security2:error] [pid 103176:tid 103176] [client 89.149.226.224:48908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "333w88.com"] [uri "/.env"] [unique_id "amrQ_Ri71AxGYaI9y-sZEwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 03:31:52
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 89.149.226.224 (hosted-by.hostdzire.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 23:31:45.494496 2026] [security2:error] [pid 7065:tid 7065] [client 89.149.226.224:43712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3-6trucking.com"] [uri "/.env"] [unique_id "amrFobxV6VyokjxWzTotjQAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-07-30 03:31:34
(11 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack