AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User hardhosts joined AbuseIPDB in November 2026 and has reported 52 IP addresses.

Standing (weight) is Unknown.

ACTIVE USER

IP	Date	Comment	Categories
🇨🇳 180.153.236.61	2 minutes ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Found User-Agent associated with security ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Found User-Agent associated with security scanner]. URI: /. Logs: [Sat Nov 14 05:15:10.036488 2026] [security2:error] [pid 44981:tid 44981] [client 180.153.236.61:0] ModSecurity: Warning. Matched phrase "user-agent:" at REQUEST_HEADERS:User-Agent. [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: user-agent: found within REQUEST_HEADERS:User-Agent: user-agent:mozilla/5.0 (windows nt 10.0; win64; x64) applewebkit/537.36 (khtml, like gecko) chrome/140.0.0.0 safari/537.36 edg/140.0.0.0; 360spider"] [hostname "nebularealm.tech"] [uri "/"] [unique_id "avfuXjKv85R3LTHddhwRQQAAAAQ"], referer: http://nebularealm.tech/ [Sat Nov 14 05:15:10.038047 2026] [security2:error] [pid 44981:tid 44981] [client 180.153.236.61:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 ... show less	Web App Attack
🇻🇬 85.155.14.60	4 minutes ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /ad ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /admin/.env. Logs: [Sat Nov 14 05:12:56.165597 2026] [security2:error] [pid 45093:tid 45093] [client 85.155.14.60:48140] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /admin/.env"] [hostname "176.105.214.112"] [uri "/admin/.env"] [unique_id "avft2CTvZ2WCTmt8g7pVtwAAAAA"], referer: https://www.google.com/ [Sat Nov 14 05:12:56.166197 2026] [security2:error] [pid 45093:tid 45093] [client 85.155.14.60:48140] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "176.105.214.112"] [uri "/admin/.env"] [unique_id "avft2CTvZ2WCTmt8g7pVtwAAAAA"], ref... show less	Web App Attack
🇮🇩 125.166.9.135	1 hour ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env. Logs: [Sat Nov 14 04:00:36.600593 2026] [security2:error] [pid 44982:tid 44982] [client 125.166.9.135:24261] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [hostname "www.pelican.hardhostserv.net"] [uri "/.env"] [unique_id "avfc5H4W2yT2zo42PmFUqQAAAAc"] [Sat Nov 14 04:00:36.876650 2026] [security2:error] [pid 44982:tid 44982] [client 125.166.9.135:24261] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "www.pelican.hardhostserv.net"] [uri "/public/index.php"] [unique_id "avfc5H4W2yT2zo42PmFUqQAAAAc"] show less	Web App Attack
🇺🇸 216.194.175.182	2 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env.bak. Logs: [Sat Nov 14 02:39:10.219947 2026] [security2:error] [pid 26510:tid 26510] [client 216.194.175.182:38050] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.bak"] [hostname "pelican.hardhostserv.net"] [uri "/.env.bak"] [unique_id "avfJzjiZlDhQ80NmsFi-KwAAAAY"] [Sat Nov 14 02:39:10.518370 2026] [security2:error] [pid 26510:tid 26510] [client 216.194.175.182:38050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "pelican.hardhostserv.net"] [uri "/public/index.php"] [unique_id "avfJzjiZlDhQ80NmsFi-KwAAAAY"] show less	Web App Attack
🇧🇪 207.175.218.17	3 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env.backup. Logs: [Sat Nov 14 01:57:31.320279 2026] [security2:error] [pid 22608:tid 22608] [client 207.175.218.17:60758] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [hostname "dev.hardhosts.com"] [uri "/.env.backup"] [unique_id "avfAC31-fPP079WmYNkltAAAAIw"] [Sat Nov 14 01:57:31.321532 2026] [security2:error] [pid 22608:tid 22608] [client 207.175.218.17:60758] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "dev.hardhosts.com"] [uri "/public/index.php"] [unique_id "avfAC31-fPP079WmYNkltAAAAIw"] show less	Web App Attack
🇺🇸 45.45.237.69	3 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config. Logs: [Sat Nov 14 01:32:01.733011 2026] [security2:error] [pid 22606:tid 22606] [client 45.45.237.69:37772] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [hostname "maksymprojects.online"] [uri "/.git/config"] [unique_id "ave6ERZ61OxRuR-z-nLB-gAAAIo"] [Sat Nov 14 01:32:01.733518 2026] [security2:error] [pid 22606:tid 22606] [client 45.45.237.69:37772] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "maksymprojects.online"] [uri "/.git/config"] [unique_id "ave6ERZ61OxRuR-z-nLB-gAAAIo"] show less	Web App Attack
🇺🇸 199.165.159.209	4 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config. Logs: [Sat Nov 14 00:47:32.361652 2026] [security2:error] [pid 22612:tid 22612] [client 199.165.159.209:35004] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [hostname "176.105.214.112"] [uri "/.git/config"] [unique_id "avevpHRQht6QKiu33MdSRQAAAJA"] [Sat Nov 14 00:47:32.362246 2026] [security2:error] [pid 22612:tid 22612] [client 199.165.159.209:35004] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "176.105.214.112"] [uri "/.git/config"] [unique_id "avevpHRQht6QKiu33MdSRQAAAJA"] show less	Web App Attack
🇧🇪 34.52.234.95	4 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /la ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /laravel/.env. Logs: [Sat Nov 14 00:38:17.098188 2026] [security2:error] [pid 22613:tid 22613] [client 34.52.234.95:60498] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [hostname "maksymprojects.online"] [uri "/laravel/.env"] [unique_id "aveted-T5G318hBhfhuLYwAAAJE"] [Sat Nov 14 00:38:17.098820 2026] [security2:error] [pid 22613:tid 22613] [client 34.52.234.95:60498] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "maksymprojects.online"] [uri "/laravel/.env"] [unique_id "aveted-T5G318hBhfhuLYwAAAJE"] show less	Web App Attack
🇺🇸 34.9.233.243	4 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env.production. Logs: [Sat Nov 14 00:24:55.644718 2026] [security2:error] [pid 10750:tid 10750] [client 34.9.233.243:58050] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [hostname "dev.hardhosts.com"] [uri "/.env.production"] [unique_id "aveqV99OPqtwxvMgnXWTZAAAABo"] [Sat Nov 14 00:24:55.646028 2026] [security2:error] [pid 10750:tid 10750] [client 34.9.233.243:58050] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "dev.hardhosts.com"] [uri "/public/index.php"] [unique_id "aveqV99OPqtwxvMgnXWTZAAAABo"] show less	Web App Attack
🇺🇸 34.174.176.66	4 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config. Logs: [Sat Nov 14 00:17:38.177576 2026] [security2:error] [pid 10750:tid 10750] [client 34.174.176.66:60352] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [hostname "dev.hardhosts.com"] [uri "/.git/config"] [unique_id "aveoot9OPqtwxvMgnXWTYgAAABo"] [Sat Nov 14 00:17:38.179047 2026] [security2:error] [pid 10750:tid 10750] [client 34.174.176.66:60352] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "dev.hardhosts.com"] [uri "/public/index.php"] [unique_id "aveoot9OPqtwxvMgnXWTYgAAABo"] show less	Web App Attack
🇬🇧 209.97.188.228	5 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config. Logs: [Fri Nov 13 23:43:02.155912 2026] [security2:error] [pid 10749:tid 10749] [client 209.97.188.228:41508] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [hostname "176.105.214.112"] [uri "/.git/config"] [unique_id "aveghpP5NIuHj2k6Q-7XiQAAABk"] [Fri Nov 13 23:43:02.156275 2026] [security2:error] [pid 10749:tid 10749] [client 209.97.188.228:41508] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "176.105.214.112"] [uri "/.git/config"] [unique_id "aveghpP5NIuHj2k6Q-7XiQAAABk"] show less	Web App Attack
🇳🇱 195.178.110.102	6 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /co ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /core/app/.env. Logs: [Fri Nov 13 23:02:03.517127 2026] [security2:error] [pid 1675:tid 1675] [client 195.178.110.102:45082] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /core/app/.env"] [hostname "ds.hardhostserv.net"] [uri "/core/app/.env"] [unique_id "aveW67-jiyk6cCL9xfau8gAAAAQ"] [Fri Nov 13 23:02:03.518645 2026] [security2:error] [pid 1675:tid 1675] [client 195.178.110.102:45082] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "ds.hardhostserv.net"] [uri "/403.shtml"] [unique_id "aveW67-jiyk6cCL9xfau8gAAAAQ"] show less	Web App Attack
🇵🇱 162.158.102.184	6 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config. Logs: [Fri Nov 13 22:57:40.252725 2026] [security2:error] [pid 1671:tid 1671] [client 162.158.102.184:12801] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [hostname "maksymprojects.online"] [uri "/.git/config"] [unique_id "aveV5FBTU43X091Zwk_oEAAAAAA"] [Fri Nov 13 22:57:40.253422 2026] [security2:error] [pid 1671:tid 1671] [client 162.158.102.184:12801] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "maksymprojects.online"] [uri "/.git/config"] [unique_id "aveV5FBTU43X091Zwk_oEAAAAAA"] show less	Web App Attack
🇵🇱 162.158.102.185	6 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/HEAD. Logs: [Fri Nov 13 22:57:40.252596 2026] [security2:error] [pid 1672:tid 1672] [client 162.158.102.185:11753] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [hostname "maksymprojects.online"] [uri "/.git/HEAD"] [unique_id "aveV5HGPXjAdN6HFjZ1PRgAAAAE"] [Fri Nov 13 22:57:40.253381 2026] [security2:error] [pid 1672:tid 1672] [client 162.158.102.185:11753] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "maksymprojects.online"] [uri "/.git/HEAD"] [unique_id "aveV5HGPXjAdN6HFjZ1PRgAAAAE"] show less	Web App Attack
🇮🇳 165.22.220.74	6 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config. Logs: [Fri Nov 13 22:40:04.017847 2026] [security2:error] [pid 1675:tid 1675] [client 165.22.220.74:51112] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [hostname "176.105.214.112"] [uri "/.git/config"] [unique_id "aveRxL-jiyk6cCL9xfau6wAAAAQ"] [Fri Nov 13 22:40:04.018209 2026] [security2:error] [pid 1675:tid 1675] [client 165.22.220.74:51112] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "176.105.214.112"] [uri "/.git/config"] [unique_id "aveRxL-jiyk6cCL9xfau6wAAAAQ"] show less	Web App Attack
🇺🇸 104.28.196.77	6 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /wp ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /wp-config.php.bak. Logs: [Fri Nov 13 22:27:19.789925 2026] [security2:error] [pid 2075:tid 2075] [client 104.28.196.77:57126] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-config.php.bak"] [hostname "porevo28.pp.ua"] [uri "/wp-config.php.bak"] [unique_id "aveOx0n39ZQZrOlZf5CMNwAAAAU"] [Fri Nov 13 22:27:19.790512 2026] [security2:error] [pid 2075:tid 2075] [client 104.28.196.77:57126] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "porevo28.pp.ua"] [uri "/wp-config.php.bak"] [unique_id "aveOx0n39ZQZrOlZf5CMNwAAAAU"... show less	Web App Attack
🇺🇸 104.28.228.77	6 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config. Logs: [Fri Nov 13 22:27:15.801664 2026] [security2:error] [pid 1674:tid 1674] [client 104.28.228.77:10138] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [hostname "porevo28.pp.ua"] [uri "/.git/config"] [unique_id "aveOwy51KYiYhORlXVYTWAAAAAM"], referer: https://www.google.com/search?q=porevo28.pp.ua [Fri Nov 13 22:27:15.802067 2026] [security2:error] [pid 1674:tid 1674] [client 104.28.228.77:10138] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "porevo28.pp.ua"] [uri "/.git/config"] [unique_id "aveOwy51K... show less	Web App Attack
🇩🇪 102.220.163.241	6 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env. Logs: [Fri Nov 13 22:23:18.415759 2026] [security2:error] [pid 1671:tid 1671] [client 102.220.163.241:62166] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [hostname "176.105.214.112"] [uri "/.env"] [unique_id "aveN1lBTU43X091Zwk_n_AAAAAA"] [Fri Nov 13 22:23:18.417069 2026] [security2:error] [pid 1671:tid 1671] [client 102.220.163.241:62166] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "176.105.214.112"] [uri "/403.shtml"] [unique_id "aveN1lBTU43X091Zwk_n_AAAAAA"] show less	Web App Attack
🇮🇩 104.28.213.124	7 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env.production. Logs: [Fri Nov 13 21:59:55.439398 2026] [security2:error] [pid 1672:tid 1672] [client 104.28.213.124:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.production"] [hostname "my.hardhostserv.net"] [uri "/.env.production"] [unique_id "aveIW3GPXjAdN6HFjZ1PFAAAAAE"], referer: https://www.google.com/search?q=my.hardhostserv.net [Fri Nov 13 21:59:55.439854 2026] [security2:error] [pid 1672:tid 1672] [client 104.28.213.124:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "my.hardhostserv.net"] [uri "/.env.production"... show less	Web App Attack
🇮🇩 104.28.245.128	7 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env.backup. Logs: [Fri Nov 13 21:59:54.477401 2026] [security2:error] [pid 2079:tid 2079] [client 104.28.245.128:0] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.backup"] [hostname "my.hardhostserv.net"] [uri "/.env.backup"] [unique_id "aveIWhXCuGgmd_AYAG9gKQAAAAc"] [Fri Nov 13 21:59:54.477874 2026] [security2:error] [pid 2079:tid 2079] [client 104.28.245.128:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "my.hardhostserv.net"] [uri "/.env.backup"] [unique_id "aveIWhXCuGgmd_AYAG9gKQAAAAc"] show less	Web App Attack
🇱🇹 77.90.185.129	8 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /sf ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /sftp-config.json. Logs: [Fri Nov 13 21:14:59.149031 2026] [security2:error] [pid 42369:tid 42369] [client 77.90.185.129:0] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [hostname "desvitlo.pp.ua"] [uri "/sftp-config.json"] [unique_id "avd907QulXQWFCsfFZD9jQAAABM"] [Fri Nov 13 21:14:59.149496 2026] [security2:error] [pid 42369:tid 42369] [client 77.90.185.129:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "desvitlo.pp.ua"] [uri "/sftp-config.json"] [unique_id "avd907QulXQWFCsfFZD9jQAAABM"... show less	Web App Attack
🇧🇪 34.62.254.152	8 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.g ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/logs/refs/heads/master. Logs: [Fri Nov 13 21:05:07.834200 2026] [security2:error] [pid 38810:tid 38810] [client 34.62.254.152:0] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/logs/refs/heads/master"] [hostname "desvitlo.pp.ua"] [uri "/.git/logs/refs/heads/master"] [unique_id "avd7g-M8sCH3hRWSur7dJAAAABI"] [Fri Nov 13 21:05:07.834604 2026] [security2:error] [pid 38810:tid 38810] [client 34.62.254.152:0] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "desvitlo.pp.ua"] [uri "/.git/logs/refs/heads/master"] [unique_id "avd7g-... show less	Web App Attack
🇵🇱 194.180.49.41	8 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env. Logs: [Fri Nov 13 21:03:59.553517 2026] [security2:error] [pid 38810:tid 38810] [client 194.180.49.41:55622] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [hostname "176.105.214.112"] [uri "/.env"] [unique_id "avd7P-M8sCH3hRWSur7dHAAAABI"] [Fri Nov 13 21:03:59.554480 2026] [security2:error] [pid 38810:tid 38810] [client 194.180.49.41:55622] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "176.105.214.112"] [uri "/403.shtml"] [unique_id "avd7P-M8sCH3hRWSur7dHAAAABI"] show less	Web App Attack
🇳🇱 213.209.159.175	8 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.e ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.env. Logs: [Fri Nov 13 20:47:18.787780 2026] [security2:error] [pid 28778:tid 28778] [client 213.209.159.175:64143] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [hostname "176.105.214.112"] [uri "/.env"] [unique_id "avd3Vkm96b4HjTvz_akqOwAAAA8"] [Fri Nov 13 20:47:18.788733 2026] [security2:error] [pid 28778:tid 28778] [client 213.209.159.175:64143] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "176.105.214.112"] [uri "/403.shtml"] [unique_id "avd3Vkm96b4HjTvz_akqOwAAAA8"] show less	Web App Attack
🇨🇳 39.163.11.67	9 hours ago	Web exploit blocked by ModSecurity on ds.hardhostserv.net [Found User-Agent associated with security ... show more Web exploit blocked by ModSecurity on ds.hardhostserv.net [Found User-Agent associated with security scanner]. URI: /. Logs: [Fri Nov 13 20:00:38.388053 2026] [security2:error] [pid 28778:tid 28778] [client 39.163.11.67:54825] ModSecurity: Warning. Matched phrase "user-agent:" at REQUEST_HEADERS:User-Agent. [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: user-agent: found within REQUEST_HEADERS:User-Agent: user-agent:mozilla/5.0 (windows nt 6.1; wow64) applewebkit/537.36 (khtml, like gecko) chrome/50.0.2661.102 safari/537.36"] [hostname "maksymprojects.online"] [uri "/"] [unique_id "avdsZkm96b4HjTvz_akqAgAAAA8"], referer: http://maksymprojects.online/ [Fri Nov 13 20:00:38.388954 2026] [security2:error] [pid 28778:tid 28778] [client 39.163.11.67:54825] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=... show less	Web App Attack