🇺🇸
TPI-Abuse
2026-02-18 03:39:30
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:39:24.865884 2026] [security2:error] [pid 195138:tid 195160] [client 104.207.45.142:44019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rmoeis.com"] [uri "/backend/.env"] [unique_id "aZU0bM4RuyaxYGIf0CT6-AAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-02-18 02:27:57
(3 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 01:00:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 20:00:21.163925 2026] [security2:error] [pid 28543:tid 28543] [client 104.207.45.142:61133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pbeyer.org"] [uri "/api/.env"] [unique_id "aZUPJbDNyx6zxAGp0KKk0gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-02-18 00:53:02
(3 months ago)
CrowdSec-Report: crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇪🇸
librebit
2026-01-03 15:39:23
(5 months ago)
Brute force
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:53
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇮🇹
VHosting
2025-12-24 02:35:08
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇺🇸
myagent.site
2025-12-08 23:56:12
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-08 15:12:57
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 10:12:52.545838 2025] [security2:error] [pid 20555:tid 20555] [client 104.207.45.142:10591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nolagardenmarket.com"] [uri "/.env"] [unique_id "aTbq9MujieFmqPLnkpnnGwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 14:14:00
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:13:53.636173 2025] [security2:error] [pid 18781:tid 18781] [client 104.207.45.142:48209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrpinman.org"] [uri "/.env"] [unique_id "aTWLoRRlZ8QQnGJqMYjQxwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2025-12-06 06:00:06
(5 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:33:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:33:28.879749 2025] [security2:error] [pid 6253:tid 6253] [client 104.207.45.142:49409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bendersite.com"] [uri "/.env"] [unique_id "aTK0-E3HPznYVH56hnwW7wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 06:41:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:40:58.195022 2025] [security2:error] [pid 11950:tid 11950] [client 104.207.45.142:41075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakesidecountrycloggers.com"] [uri "/.env"] [unique_id "aTJ-emliuCUl8Nby0IoeLwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 04:40:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:40:10.090686 2025] [security2:error] [pid 32486:tid 32486] [client 104.207.45.142:25661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "personalizedbirthdaynapkins.com"] [uri "/.env"] [unique_id "aTJiKglWOJXYioF6u-qYdwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:55:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:55:08.187124 2025] [security2:error] [pid 12815:tid 12815] [client 104.207.45.142:29733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accu-tuner.com"] [uri "/.env"] [unique_id "aTJXnKTA0DmiquipDVUiJAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack