🇩🇪
NewGastroline
2026-05-17 05:26:11
(2 weeks ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-05-17 04:44:11
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 03:19:18
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 23:19:14.133750 2026] [security2:error] [pid 15012:tid 15012] [client 207.241.173.59:27214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maerynray.com"] [uri "/.env.production.copy"] [unique_id "agkzspJ6yEqoGSeJfuz0jgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
nzhost.co.nz
2026-05-17 02:11:04
(2 weeks ago)
$f2bV_matches
Hacking
Brute-Force
🇫🇷
Kimax
2026-05-17 01:10:16
(2 weeks ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇬🇧
andypiper
2026-05-17 01:01:10
(2 weeks ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
2026-05-17 00:15:33
(2 weeks ago)
Portscan: TCP/80 (6x), TCP/443 (4x)
Port Scan
🇺🇸
TPI-Abuse
2026-05-16 23:39:17
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 19:39:12.933169 2026] [security2:error] [pid 10660:tid 10660] [client 207.241.173.59:58154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "interior-cosmetics.com"] [uri "/.env.production.copy"] [unique_id "agkAIL-dkH0a2YP_BJuJqAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-05-16 22:56:24
(2 weeks ago)
[SunMay1700:56:20.1680362026][security2:error][pid2947547:tid2947607][client207.241.173.59:0]ModSecu ...
show more
[SunMay1700:56:20.1680362026][security2:error][pid2947547:tid2947607][client207.241.173.59:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.copy\$\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1170\"][id\"390586\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessbackupfile\(disablethisruleifyourequireaccesstofilesthatendwith.copy\)\"][severity\"CRITICAL\"][hostname\"dgtime.ch\"][uri\"/.env.local.copy\"][unique_id\"agj2FLAPGxEN-2s9PQ1XuQAAAJM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇬🇧
Apache
2026-05-16 22:14:19
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (US/United States/-): 5 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (US/United States/-): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-05-16 22:08:17
(2 weeks ago)
Restricted File Access Attempt. Matched phrase "secrets.json" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-16 21:34:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 17:34:42.831029 2026] [security2:error] [pid 8746:tid 8746] [client 207.241.173.59:7286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fales-lorenz.net"] [uri "/.env"] [unique_id "agji8tTfeAXlEgoVQyBYSQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-16 20:45:08
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 16:45:02.351768 2026] [security2:error] [pid 2872:tid 2872] [client 207.241.173.59:55722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davesastro.com"] [uri "/.env.production.save"] [unique_id "agjXTj8prrMtktQfH3H1NgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-16 19:57:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 207.241.173.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 15:57:44.139968 2026] [security2:error] [pid 5924:tid 5924] [client 207.241.173.59:23612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindbodyrestored.com"] [uri "/.env.production.copy"] [unique_id "agjMOBp-DmA-Gr7En_F8fgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bescared
2026-05-16 19:55:34
(2 weeks ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack