🇸🇪
vaia.cloud
2026-11-11 18:45:04
UTC ·
(2 days ago)
crowdsecurity/http-wordpress-scan
Brute-Force
Web App Attack
🇳🇱
Roderic
2026-11-07 14:50:36
UTC ·
(6 days ago)
Insights: 5 probe requests within 24 hours on 1 site, e.g. /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php (no normal page views)
Web App Attack
🇩🇪
EGP Abuse Dept
2026-10-30 05:04:17
UTC ·
(2 weeks ago)
Scanning for web/db/file exploits on www.saverne.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 15:05:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:05:21.442117 2026] [security2:error] [pid 20130:tid 20130] [client 158.173.36.80:62083] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:05:21.442117 2026] [security2:error] [pid 20130:tid 20130] [client 158.173.36.80:62083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deniz-bilgisayar.com"] [uri "/.env"] [unique_id "atomMXIsgidbsbyPIPZwPgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 14:31:54
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 10:31:51.703585 2026] [security2:error] [pid 28294:tid 28294] [client 158.173.36.80:56749] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 10:31:51.703585 2026] [security2:error] [pid 28294:tid 28294] [client 158.173.36.80:56749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ellesorority.com"] [uri "/.env"] [unique_id "atoeV217bpwsm7jp6UqPkAAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 12:56:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 08:56:21.519113 2026] [security2:error] [pid 3209:tid 3209] [client 158.173.36.80:64255] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 08:56:21.519113 2026] [security2:error] [pid 3209:tid 3209] [client 158.173.36.80:64255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qualuedata.com"] [uri "/.env"] [unique_id "atoH9RiVM-OHRGOuEwZn4AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 11:53:50
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:53:42.726269 2026] [security2:error] [pid 16892:tid 16892] [client 158.173.36.80:32401] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:53:42.726269 2026] [security2:error] [pid 16892:tid 16892] [client 158.173.36.80:32401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belindalloyd.com"] [uri "/.env"] [unique_id "atn5RigZuOpU-AjlR8ACjAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:37:49
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:37:46.101492 2026] [security2:error] [pid 19535:tid 19644] [client 158.173.36.80:62393] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:37:46.101492 2026] [security2:error] [pid 19535:tid 19644] [client 158.173.36.80:62393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exedesalesteam.com"] [uri "/.env"] [unique_id "atnZajhFo8w4a59km2j0EgAAAcI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:17:14
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:17:06.562679 2026] [security2:error] [pid 18526:tid 18526] [client 158.173.36.80:24347] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:17:06.562679 2026] [security2:error] [pid 18526:tid 18526] [client 158.173.36.80:24347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "escribaniasmith.com.ar"] [uri "/.env"] [unique_id "atnUkmw3R8cSUIHBZoShlgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 04:57:46
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:57:40.639849 2026] [security2:error] [pid 27350:tid 27350] [client 158.173.36.80:33557] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:57:40.639849 2026] [security2:error] [pid 27350:tid 27350] [client 158.173.36.80:33557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesallenwalker.com"] [uri "/.env"] [unique_id "atmXxKhrpGotjIUilNSEUwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-22 01:17:48
UTC ·
(3 weeks ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 00:10:34
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 20:10:30.249512 2026] [security2:error] [pid 8617:tid 8632] [client 158.173.36.80:62467] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 20:10:30.249512 2026] [security2:error] [pid 8617:tid 8632] [client 158.173.36.80:62467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nederbragt.net"] [uri "/.env"] [unique_id "atlUdoS3mxcfHvbpjU4viQAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 07:06:38
UTC ·
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-19 01:39:56
UTC ·
(3 weeks ago)
IP matched detection query many 3xx errors.
Brute-Force
2026-10-18 20:54:46
UTC ·
(3 weeks ago)
apache vulnerability scan
Web App Attack
