🇺🇸
TPI-Abuse
2026-09-16 15:22:17
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:21:51.247686 2026] [security2:error] [pid 30107:tid 30107] [client 213.254.175.57:39929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.139"] [uri "/newsite/.env"] [unique_id "aqq0D2z2H1zzXDUHK1amlQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ddw
2026-09-16 12:44:00
(3 weeks ago)
WordPress Brute Force Attack.
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 12:34:59
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:34:36.633337 2026] [security2:error] [pid 9117:tid 9117] [client 213.254.175.57:29385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.146"] [uri "/library/.env"] [unique_id "aqqM3Hhi5ZJkpGgc-UviBQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 10:10:40
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:10:12.774672 2026] [security2:error] [pid 24261:tid 24261] [client 213.254.175.57:31185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.42"] [uri "/app/config/.env"] [unique_id "aqprBB_jC4k3RQADSJPhOgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Starburst SysOp Team
2026-09-16 07:02:22
(3 weeks ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-3)
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-16 00:33:09
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:33:04.658363 2026] [security2:error] [pid 2287:tid 2287] [client 213.254.175.57:56711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.99"] [uri "/wp-admin/.env"] [unique_id "aqnjwNZdjS5evuvq4v49AAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 20:38:42
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:38:31.241677 2026] [security2:error] [pid 31711:tid 31731] [client 213.254.175.57:36575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.82"] [uri "/blog/.env"] [unique_id "aqmsxxlZ4tW07tAjHdin-QAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 19:17:20
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:17:01.507643 2026] [security2:error] [pid 17053:tid 17053] [client 213.254.175.57:65337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.11"] [uri "/core/.env"] [unique_id "aqmZrZEBlizl7IzWupwm9AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 09:05:50
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 213.254.175.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 05:05:39.648939 2026] [security2:error] [pid 442:tid 539] [client 213.254.175.57:37675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.133"] [uri "/storage/.env"] [unique_id "aqkKY6GgLgjf3XROOliKiQAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
anotherwatcher
2026-09-15 08:34:27
(3 weeks ago)
bad bot
Bad Web Bot
🇸🇬
securejdprop
2026-07-19 16:08:40
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing.
Hacking
Web App Attack
🇦🇺
screwlooseit.com.au
2026-07-13 03:51:20
(3 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
GB/United Kingdom/-
Web App Attack
🇺🇸
mnsf
2026-05-25 19:05:13
(4 months ago)
Too many Status 40X (20)
Brute-Force
Web App Attack
🇧🇷
dominioz
2026-05-24 10:47:15
(4 months ago)
2026-05-24 10:46:39 GET /.swf - - 213.254.175.57 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/5 ...
show more
2026-05-24 10:46:39 GET /.swf - - 213.254.175.57 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631
2026-05-24 10:46:40 GET /.rhosts - - 213.254.175.57 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631
2026-05-24 10:46:43 GET /.well-known/browserid - - 213.254.175.57 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631
2026-05-24 10:46:45 GET /.well-known/mercure - - 213.254.175.57 HTTP/1.1 Mozilla/5.0+(Windows+NT+x64)+AppleWebKit/537.36 - 404 104631
...
show less
Web App Attack
🇮🇩
fazar
2026-05-17 07:48:23
(4 months ago)
crowdsecurity/http-crawl-non_statics on node: bdj03
Web App Attack
Bad Web Bot
