🇺🇸
jhuisi
2026-08-24 18:22:44
(4 days ago)
MailMan List Subscription Abuse
Web App Attack
🇩🇪
xdearboy
2026-08-23 14:24:19
(5 days ago)
Host Firewall: Blocked IP due to TCP connection flood on port 443.
DDoS Attack
🇮🇹
VHosting
2026-08-19 01:00:05
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇦🇺
Bay13
2026-07-31 10:56:31
(4 weeks ago)
CrowdSec:custom/http-probing
Web App Attack
🇸🇬
securejdprop
2026-07-28 17:13:13
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 17:34:08
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 13:34:04.145047 2026] [security2:error] [pid 3451:tid 3451] [client 43.243.192.91:19980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ieas.org"] [uri "/.env.development"] [unique_id "akvnDMD4a-diO0RXQCUHQAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 14:20:30
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 10:20:23.603412 2026] [security2:error] [pid 1317:tid 1317] [client 43.243.192.91:30978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "h-vpastoralcharge.org"] [uri "/.env.local"] [unique_id "aku5p7IfuUXOnDYOZtc8-AAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 10:29:45
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:29:39.510200 2026] [security2:error] [pid 21155:tid 21155] [client 43.243.192.91:27500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hope4elsalvador.org"] [uri "/.env.example"] [unique_id "akuDk2vTQX98wXMTiBzOdgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 22:11:22
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:11:13.501384 2026] [security2:error] [pid 18617:tid 18617] [client 43.243.192.91:12190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gormish.org"] [uri "/.env.development"] [unique_id "akrWgX0YaMFae8kXYhibXgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 20:59:13
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:59:04.433261 2026] [security2:error] [pid 15671:tid 15671] [client 43.243.192.91:9614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldcountrygermanamericanclub.org"] [uri "/.env.production"] [unique_id "akrFmAI3c0x3tSdRxyHl-wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 17:59:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 13:59:21.734001 2026] [security2:error] [pid 20628:tid 20628] [client 43.243.192.91:11138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giveorcas.org"] [uri "/.env.staging"] [unique_id "akqbecl5u4pRo-yVqaWzMgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-04 17:27:33
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 12:18:20
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 08:18:13.815881 2026] [security2:error] [pid 1657:tid 1657] [client 43.243.192.91:22464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dc406.org"] [uri "/.env.example"] [unique_id "akeohZHZzlfQcilTEnHkKgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 02:05:16
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 22:05:08.928262 2026] [security2:error] [pid 30036:tid 30036] [client 43.243.192.91:10956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centralbaptistalcoa.org"] [uri "/.env.example"] [unique_id "akXHVEKDZ2RPUrteHxYZ-QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 17:32:36
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 13:32:26.416222 2026] [security2:error] [pid 29230:tid 29230] [client 43.243.192.91:20576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cain2012.org"] [uri "/wp-config.bak"] [unique_id "akVPKlec7A7wMasJmY6oegAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack