2026-03-30 16:30:55
(2 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇮🇹
VHosting
2025-12-20 14:37:39
(5 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇺🇸
Ghost Rider
2025-12-14 03:26:20
(6 months ago)
RdpGuard detected brute-force attempt on FTP
Brute-Force
🇺🇸
TPI-Abuse
2025-12-14 03:18:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 22:18:43.585843 2025] [security2:error] [pid 31724:tid 31724] [client 102.129.153.178:54984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "voodooshop.com"] [uri "/.env"] [unique_id "aT4sk76TUgFm5jltm-rtswAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-14 02:07:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 21:07:10.028677 2025] [security2:error] [pid 23789:tid 23789] [client 102.129.153.178:14344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clarktec.com"] [uri "/.env"] [unique_id "aT4bzsfDQzyB22MouxvvWQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 22:31:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 17:31:46.425709 2025] [security2:error] [pid 16335:tid 16335] [client 102.129.153.178:34159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yogitunes.com"] [uri "/.env"] [unique_id "aT3pUpPqFifVNfjP-1QvLAAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2025-12-13 19:11:11
(6 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 17:17:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 12:17:25.690994 2025] [security2:error] [pid 12217:tid 12217] [client 102.129.153.178:7664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zenithxen.com"] [uri "/laravel/.env"] [unique_id "aT2fpVwV9bcBsblbeP_biwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 15:28:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 10:28:47.983273 2025] [security2:error] [pid 15491:tid 15491] [client 102.129.153.178:46211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ebizplayers.com"] [uri "/.env"] [unique_id "aT2GL2tS5KzcfV9BMOcpjQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 13:59:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 08:59:22.011251 2025] [security2:error] [pid 22373:tid 22373] [client 102.129.153.178:29736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portraitsinblues.com"] [uri "/.env"] [unique_id "aT1xOpBofe1qznsIeLZ95AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 08:53:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 03:53:35.841252 2025] [security2:error] [pid 17196:tid 17196] [client 102.129.153.178:17484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "endriss.info"] [uri "/.env"] [unique_id "aT0pjzxuYXBGn5ZSW5s6EQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 08:31:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 03:31:06.957352 2025] [security2:error] [pid 11310:tid 11325] [client 102.129.153.178:40776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barnetts.us"] [uri "/.env"] [unique_id "aT0kSggNAdMKJnTchHNq4wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 06:20:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 01:19:59.729253 2025] [security2:error] [pid 24159:tid 24159] [client 102.129.153.178:48704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evelynkay.com"] [uri "/.env"] [unique_id "aT0Fjwegf6jMSjnus4spUAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 01:21:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 12 20:20:56.131750 2025] [security2:error] [pid 4373:tid 4373] [client 102.129.153.178:50263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "itre.org"] [uri "/.env"] [unique_id "aTy_eGX5-gPXmNAJLMUWBQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
b4shnhawx
2025-07-15 05:34:10
(10 months ago)
1752557649 - 07/15/2025 05:34:09 Host: 102.129.153.178/102.129.153.178 Port: 443 TCP Blocked
...
Bad Web Bot
Web App Attack