🇺🇸
TPI-Abuse
2026-10-08 20:35:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 16:35:14.762340 2026] [security2:error] [pid 13610:tid 13628] [client 162.159.119.11:12148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sloveniaflyfishing.com"] [uri "/.htaccess"] [unique_id "asf-gvHVS9lQBK_gjDynMgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 08:09:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 04:09:16.369425 2026] [security2:error] [pid 4912:tid 4912] [client 162.159.119.11:10374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cozydesignae.com"] [uri "/.env.dev"] [unique_id "asdPrD1J9UhhA_4Ge2PddgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 01:20:47
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 21:20:40.530108 2026] [security2:error] [pid 9276:tid 9276] [client 162.159.119.11:13496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnlittlehorn.com"] [uri "/.htaccess"] [unique_id "asbv6OM7ii6trVVWRzCJigAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 13:01:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 09:01:14.719695 2026] [security2:error] [pid 16325:tid 16325] [client 162.159.119.11:9604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daisyweddinginvitations.com"] [uri "/.env.staging"] [unique_id "asZCmp8FsEjpS5p7UTi7_QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 22:49:01
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 18:48:56.968711 2026] [security2:error] [pid 23687:tid 23687] [client 162.159.119.11:10000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landjudging.com"] [uri "/.svn/entries"] [unique_id "asQpWILC0f7bA8BbWPcOxAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-26 02:18:45
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 12:38:20
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:38:13.563194 2026] [security2:error] [pid 13285:tid 13285] [client 162.159.119.11:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.webuildbeaches.com"] [uri "/.env"] [unique_id "ao2MtXEPSFIm0-FmWr7NpQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-08-21 09:47:32
(1 month ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇧🇪
madeit
2026-08-20 20:50:00
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-06 01:58:12
(2 months ago)
Web App Attack
🇺🇸
mawan
2026-08-04 13:18:43
(2 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-20 22:03:26
(5 months ago)
Auto-ban: >3000 req/min op 2026-04-20
Web App Attack
SSH
Hacking
2026-04-17 12:09:01
(5 months ago)
Web App Attack
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-08 22:01:46
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-07.
show less
Web App Attack
SSH
Hacking
🇺🇸
mnsf
2026-04-05 21:05:34
(6 months ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
