🇺🇸
TPI-Abuse
2026-08-26 01:25:46
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 21:25:21.596134 2026] [security2:error] [pid 7394:tid 7412] [client 45.132.227.188:52931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.134"] [uri "/database/.env"] [unique_id "ao5Age06Ta7kbKKtAUVB_wAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Zdeněk Svancar
2026-08-25 21:33:45
(3 days ago)
45.132.227.188 - - [25/Aug/2026:21:33:42 +0000] "GET /cgi-bin/.env HTTP/1.1" 404 181 "-" "Mozilla/5. ...
show more
45.132.227.188 - - [25/Aug/2026:21:33:42 +0000] "GET /cgi-bin/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36"
45.132.227.188 - - [25/Aug/2026:21:33:44 +0000] "GET /core/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36"
...
show less
Port Scan
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 21:22:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 17:22:02.573372 2026] [security2:error] [pid 20538:tid 20538] [client 45.132.227.188:38829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.244"] [uri "/audio/.env"] [unique_id "ao4HerF1_u5tNreaDnet3gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-08-24 10:15:46
(5 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-08-17 01:11:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 21:10:57.339262 2026] [security2:error] [pid 29662:tid 29662] [client 45.132.227.188:36117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.50"] [uri "/base/.env"] [unique_id "aoJfoejnkvmwAeiZy29GdAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 23:34:39
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:34:11.958520 2026] [security2:error] [pid 2111:tid 2111] [client 45.132.227.188:22959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.250"] [uri "/new/.env"] [unique_id "aoJI847f3HkAXln04hcwpgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
clapper
2026-08-16 22:27:38
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 45.132.227.188 (US/United States/-): 3 in the l ...
show more
(mod_security) mod_security (id:949110) triggered by 45.132.227.188 (US/United States/-): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-16 12:55:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 08:55:11.471968 2026] [security2:error] [pid 29410:tid 29410] [client 45.132.227.188:24799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.156"] [uri "/sites/all/libraries/mailchimp/.env"] [unique_id "aoGzL8cF8kLT8miYHt9qPAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 10:11:20
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 06:10:51.732909 2026] [security2:error] [pid 2640:tid 2640] [client 45.132.227.188:23887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.31"] [uri "/backend/.env"] [unique_id "aoGMq0qYmc7srVTTUP2TuQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 08:58:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 04:58:44.321707 2026] [security2:error] [pid 10479:tid 10479] [client 45.132.227.188:33451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.27"] [uri "/crm/.env"] [unique_id "aoF7xB4NZQOAm0oS4cuI3gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 06:05:22
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 02:05:06.289113 2026] [security2:error] [pid 12091:tid 12091] [client 45.132.227.188:57279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.103"] [uri "/library/.env"] [unique_id "aoFTEouJHa1BAxuT6e3nZwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 03:35:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 23:35:24.867634 2026] [security2:error] [pid 1242:tid 1242] [client 45.132.227.188:35205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.182"] [uri "/old/.env"] [unique_id "aoEv_P2f3v3cRXGjBB4D2QAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 02:09:02
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 22:08:33.081207 2026] [security2:error] [pid 9185:tid 9185] [client 45.132.227.188:54591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.148"] [uri "/core/.env"] [unique_id "aoEbobT_ay04E_gWkwURggAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 21:21:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:21:19.327434 2026] [security2:error] [pid 3506:tid 3506] [client 45.132.227.188:24179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.98"] [uri "/cgi-bin/.env"] [unique_id "aoDYT16uOHkIfcEfiR1BhgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 20:47:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 16:46:57.651848 2026] [security2:error] [pid 2846739:tid 2846750] [client 45.132.227.188:29591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.126"] [uri "/audio/.env"] [unique_id "aoDQQd2BsEela1La6LQnqQAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack