🇧🇪
madeit
2026-10-27 06:33:26
(14 hours ago)
Web App Attack
🇺🇸
seajaydaboi36
2026-10-22 05:41:01
(5 days ago)
Automated detection: unsolicited connection to Pterodactyl Wings server.
Port Scan
Hacking
Brute-Force
🇺🇸
seajaydaboi36
2026-10-21 05:09:12
(6 days ago)
Automated detection: unsolicited connection to Pterodactyl Wings server.
Port Scan
Hacking
Brute-Force
🇧🇪
madeit
2026-10-16 23:03:02
(1 week ago)
Web App Attack
🇧🇪
madeit
2026-10-07 03:23:51
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-13 07:45:36
(1 month ago)
Web App Attack
🇮🇩
securejdprop
2026-08-21 05:46:39
(2 months ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇯🇵
Kinsei Engineering Inc.
2026-07-13 02:28:23
(3 months ago)
UFW:High-frequency access to unused ports
Port Scan
🇺🇸
TPI-Abuse
2026-05-15 11:47:55
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 07:47:47.795907 2026] [security2:error] [pid 2750:tid 2750] [client 104.23.190.142:10818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ageh.com"] [uri "/.env.local/"] [unique_id "agcH48k7RJ-15xt7AudS-AAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 05:49:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:49:39.498885 2026] [security2:error] [pid 13154:tid 13154] [client 104.23.190.142:10255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.williams-rodriguez.org"] [uri "/site/.env"] [unique_id "adCmc0PSpz5ywXEkiKzXXQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2026-03-20 00:27:41
(7 months ago)
104.23.190.142 - - [20/Mar/2026:
...
Brute-Force
🇺🇸
TPI-Abuse
2026-03-19 11:34:12
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:34:03.077635 2026] [security2:error] [pid 26506:tid 26506] [client 104.23.190.142:9757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kingfish.bet"] [uri "/server/.env"] [unique_id "abvfKyDJ9DxiB3W8YrTb9AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:53:34
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:53:27.268690 2026] [security2:error] [pid 25519:tid 25519] [client 104.23.190.142:11400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.attendantsfromhell.banis-associates.com"] [uri "/.env.local.backup"] [unique_id "abu5h9wJyngmSCDgoO1ofgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 08:37:07
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:36:57.068171 2026] [security2:error] [pid 14842:tid 14842] [client 104.23.190.142:10814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.themotelwest.com"] [uri "/.env.old"] [unique_id "abu1qQD6EEtUQfSDm87pHgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 07:54:19
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.190.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 03:54:13.613846 2026] [security2:error] [pid 22884:tid 22884] [client 104.23.190.142:9736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bigislandhawaiirealestate.com"] [uri "/root/.env"] [unique_id "aburpYAmHg3Qc9_ng45bNQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
