🇺🇸
TPI-Abuse
2026-02-04 15:15:31
(3 months ago)
(mod_security) mod_security (id:240000) triggered by 89.251.0.109 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240000) triggered by 89.251.0.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 10:15:24.130302 2026] [security2:error] [pid 4057871:tid 4057871] [client 89.251.0.109:57979] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||valuechains4poor.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "valuechains4poor.net"] [uri "/images/stories/themes.php"] [unique_id "aYNijCRo1EjpLdjgAJub-wAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-02-04 08:58:26
(4 months ago)
Multiple WAF Violations
Web App Attack
🇦🇺
oncord
2026-02-04 08:21:06
(4 months ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2026-02-02 05:36:53
(4 months ago)
(From [email protected] ) Clock’s Almost Out:
Half-Price 2M Contact Page Blast — Only If You A ...
show more
(From [email protected] ) Clock’s Almost Out:
Half-Price 2M Contact Page Blast — Only If You Act Now.
You’re reading this because the system works — stop doubting and start scaling.
Visit **contactpageads.com** before the window closes.
show less
Phishing
Web Spam
🇫🇷
dynamix
2026-01-27 17:32:55
(4 months ago)
Multiple WAF Violations
Web App Attack
🇮🇩
Burayot
2026-01-02 09:48:37
(5 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 89.251.0.109 (CA/Canada/-): 1 in th ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 89.251.0.109 (CA/Canada/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
myagent.site
2025-12-08 19:37:58
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-11-17 11:51:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 89.251.0.109 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 89.251.0.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 06:51:41.452367 2025] [security2:error] [pid 9945:tid 9945] [client 89.251.0.109:64351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medioskreativos.com"] [uri "/.env"] [unique_id "aRsMTQqMs-GhqpxObhevAAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-17 03:10:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 89.251.0.109 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 89.251.0.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 22:10:52.040287 2025] [security2:error] [pid 32162:tid 32182] [client 89.251.0.109:22909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reghay.com"] [uri "/.env"] [unique_id "aRqSPFMeEZ0TZVq38aEXrQAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-16 16:26:58
(6 months ago)
wp admin page access attempt
...
Hacking
Web App Attack
🇺🇸
myagent.site
2025-11-15 18:25:32
(6 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇨🇭
teamsecure
2025-11-15 08:33:35
(6 months ago)
Banned for trying to access env
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 05:05:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 89.251.0.109 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 89.251.0.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 00:04:59.248747 2025] [security2:error] [pid 27314:tid 27314] [client 89.251.0.109:32827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fourhillsco.com"] [uri "/.env"] [unique_id "aRgJ-1Jv5H-E5ko1xwocRwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-11 05:55:11
(6 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2025-11-08 05:50:13
(6 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking