🇺🇸
TPI-Abuse
2026-09-16 15:15:34
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:15:21.156379 2026] [security2:error] [pid 32662:tid 32662] [client 213.254.175.197:62157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.115"] [uri "/vendor/.env"] [unique_id "aqqyibszA2YjnQiiKwNyrgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 12:35:01
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:34:36.127916 2026] [security2:error] [pid 7461:tid 7461] [client 213.254.175.197:25821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.146"] [uri "/wp-admin/.env"] [unique_id "aqqM3DJIQbeQgvRwCFxpoAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 10:10:51
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:10:15.860278 2026] [security2:error] [pid 21729:tid 21729] [client 213.254.175.197:33753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.42"] [uri "/vendor/laravel/.env"] [unique_id "aqprB20t69trOtROWzRMEwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 08:11:14
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:11:01.692254 2026] [security2:error] [pid 14649:tid 14649] [client 213.254.175.197:33887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.142"] [uri "/audio/.env"] [unique_id "aqpPFfH9kRz9pmwaBcU75wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 10:11:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:11:03.554248 2026] [security2:error] [pid 4428:tid 4428] [client 213.254.175.197:24929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.238"] [uri "/old/.env"] [unique_id "aqkZt3Rz6RF6kfXjnlO6pQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
anotherwatcher
2026-09-15 08:34:26
(1 week ago)
bad bot
Bad Web Bot
🇺🇸
threatintelligence_bvc
2026-07-28 18:16:15
(1 month ago)
Brute-Force
🇫🇷
dynamix
2026-07-13 05:24:27
(2 months ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-07-13 03:53:21
(2 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
GB/United Kingdom/-
Web App Attack
🇺🇸
mnsf
2026-05-29 00:05:24
(3 months ago)
Too many Status 40X (20)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-05-26 21:05:50
(3 months ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-05-25 20:05:14
(3 months ago)
Too many Status 40X (20)
Brute-Force
Web App Attack
🇧🇷
dominioz
2026-05-24 10:47:24
(3 months ago)
2026-05-24 10:46:45 GET /.well-known/jwks.json - - 213.254.175.197 HTTP/1.1 Mozilla/5.0+(Windows+NT+ ...
show more
2026-05-24 10:46:45 GET /.well-known/jwks.json - - 213.254.175.197 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631
2026-05-24 10:46:46 GET /07 - - 213.254.175.197 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631
2026-05-24 10:46:49 GET /2005 - - 213.254.175.197 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631
2026-05-24 10:46:51 GET /AdminTools - - 213.254.175.197 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631
...
show less
Web App Attack
2026-05-03 17:49:11
(4 months ago)
Multiple web server 400 error codes from same source ip
Web App Attack
2026-04-05 17:18:57
(5 months ago)
(wordpress) Failed wordpress login from 213.254.175.197 (US/United States/-)
Brute-Force
