🇯🇵
rafale2k
2026-06-03 10:26:22
(20 hours ago)
WordPress Brute Force
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-04-02 11:15:58
(2 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇩🇪
EGP Abuse Dept
2026-04-01 06:31:12
(2 months ago)
Scraping webshop URLs (www.badgehouder.nl), likely botnet drone
Bad Web Bot
Exploited Host
🇬🇧
consul.to
2026-03-15 12:14:54
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
VHosting
2026-02-18 23:10:11
(3 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-15 20:43:25
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 15:43:19.849595 2025] [security2:error] [pid 9973:tid 9973] [client 102.129.153.46:45654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stormwlf.com"] [uri "/.env"] [unique_id "aUBy52Rj5A3NIW-uYPWk7wAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 14:40:59
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 09:40:55.560951 2025] [security2:error] [pid 19244:tid 19244] [client 102.129.153.46:4763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spacebooger.com"] [uri "/.env"] [unique_id "aUAd9yUw6VKSUfEuVt1_awAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 13:45:41
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 08:45:34.120996 2025] [security2:error] [pid 23699:tid 23699] [client 102.129.153.46:2793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cosentient.com"] [uri "/.env"] [unique_id "aUAQ_idDK9Dk_ztnRXT30AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 11:53:10
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 06:53:06.119346 2025] [security2:error] [pid 18086:tid 18086] [client 102.129.153.46:61547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dunningtons.com"] [uri "/.env"] [unique_id "aT_2oqYv5G6dHMTa9z0-SgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 11:35:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 06:35:04.414273 2025] [security2:error] [pid 13682:tid 13686] [client 102.129.153.46:62157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "9line-lb.com"] [uri "/.env"] [unique_id "aT_yaPxXlFo6cE4kOyqevQAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
EGP Abuse Dept
2025-12-15 11:10:05
(5 months ago)
Unauthorized connection to FTP port 21
Port Scan
Hacking
🇺🇸
TPI-Abuse
2025-12-15 09:15:24
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 04:15:18.327982 2025] [security2:error] [pid 16789:tid 16789] [client 102.129.153.46:29090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rohn.com"] [uri "/.env"] [unique_id "aT_RpjYAyY9QANzoA5Xf4wAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 04:35:18
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 23:35:12.236019 2025] [security2:error] [pid 13599:tid 13599] [client 102.129.153.46:56514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockymtnfire.com"] [uri "/.env"] [unique_id "aT-QAPNBFvUuEazHU2bvAgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 01:38:52
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 20:38:48.017534 2025] [security2:error] [pid 15549:tid 15549] [client 102.129.153.46:59990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fancycleaners.com"] [uri "/.env"] [unique_id "aT9mqARKTmcS8XsELp3_sAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 00:56:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.153.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 19:56:01.755498 2025] [security2:error] [pid 21411:tid 21411] [client 102.129.153.46:33305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "donnysimonton.com"] [uri "/.env"] [unique_id "aT9cofrsGyXp_UUadnaVoAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack