🇺🇸
TPI-Abuse
2026-08-24 07:22:07
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 03:21:35.709335 2026] [security2:error] [pid 23912:tid 23912] [client 45.132.227.190:45241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.90"] [uri "/app/.env"] [unique_id "aovw_wsZFFDA-t1_F0RIFgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 01:11:36
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 21:10:50.668616 2026] [security2:error] [pid 29653:tid 29653] [client 45.132.227.190:52343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.50"] [uri "/library/.env"] [unique_id "aoJfmt5jluv9MtnDQcdC9gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 23:34:43
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:34:17.957760 2026] [security2:error] [pid 17457:tid 17457] [client 45.132.227.190:44401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.250"] [uri "/vendor/laravel/.env"] [unique_id "aoJI-XQtXqFj5bdEYVEc1gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 22:56:13
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 18:55:52.082302 2026] [security2:error] [pid 30760:tid 30760] [client 45.132.227.190:45631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.61"] [uri "/app/.env"] [unique_id "aoI_-PaUpRqARDkQVE6c_QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 16:09:22
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 12:09:03.563146 2026] [security2:error] [pid 6250:tid 6250] [client 45.132.227.190:41685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.92"] [uri "/storage/.env"] [unique_id "aoHgn9gikz3Z678lr_LQowAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 02:09:47
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 22:09:34.659107 2026] [security2:error] [pid 6568:tid 6568] [client 45.132.227.190:46789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.238"] [uri "/vendor/laravel/.env"] [unique_id "aoEb3kYADKlAIr8Y1sWn_gAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 21:21:35
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:21:20.439232 2026] [security2:error] [pid 3508:tid 3508] [client 45.132.227.190:53891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.98"] [uri "/core/.env"] [unique_id "aoDYUG1YcNqKmPeEvJlCPAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 20:47:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 16:46:59.760850 2026] [security2:error] [pid 2846739:tid 2846766] [client 45.132.227.190:54411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.126"] [uri "/base/.env"] [unique_id "aoDQQ92BsEela1La6LQnrwAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
TheDjRider
2026-08-15 19:56:52
(3 weeks ago)
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ...
show more
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-08-15T19:56:48.860651726Z. Context: http_status=404
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 17:55:39
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 13:55:36.178784 2026] [security2:error] [pid 14519:tid 14519] [client 45.132.227.190:53119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.5"] [uri "/.env"] [unique_id "aoCoGP1p5zszJic0OyjlfgAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 15:57:47
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 11:57:22.576440 2026] [security2:error] [pid 10052:tid 16365] [client 45.132.227.190:64929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.21"] [uri "/app/config/.env"] [unique_id "aoCMYnBnqnsB_gx5aGo3IwAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 14:25:59
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.227.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 10:25:52.050306 2026] [security2:error] [pid 12735:tid 12735] [client 45.132.227.190:56605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.10"] [uri "/192.64.150.10/.env"] [unique_id "aoB28JScCyTq92__jHjo9QAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-08-06 02:53:57
(1 month ago)
cloudlinux2 fail2ban: 2026-08-06 04:49:10,804 fail2ban.filter [1460]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-06 04:49:10,804 fail2ban.filter [1460]: INFO [plesk-wordpress] Found 45.146.55.165 - 2026-08-06 04:49:10cloudlinux2 fail2ban: 2026-08-06 04:49:06,386 fail2ban.filter [1460]: INFO [plesk-wordpress] Found 173.239.224.136 - 2026-08-06 04:49:05cloudlinux2 fail2ban: 2026-08-06 04:49:06,386 fail2ban.filter [1460]: INFO [plesk-wordpress] Found 173.239.224.125 - 2026-08-06 04:49:05cloudlinux2 fail2ban: 2026-08-06 04:49:20,154 fail2ban.filter [1460]: INFO [plesk-modsecurity] Found 2.26.82.237 - 2026-08-06 04:49:20cloudlinux2 fail2ban: 2026-08-06 04:49:43,010 fail2ban.filter [1460]: INFO [plesk-wordpress] Found 173.239.213.21 - 2026-08-06 04:49:42cloudlinux2 fail2ban: 2026-08-06 04:49:58,763 fail2ban.filter [1460]: INFO [plesk-wordpress] Found 91.193.232.139 - 2026-08-06 04:49:58cloudlinux2 fail2ban: 2026-08-06 04:52:40,426 fail2ban.filter [1460]: INFO [plesk-wordpress] Found 45.132.227.190 - 2026-08-06 04:52:39cl
show less
FTP Brute-Force
Web App Attack
🇩🇪
neckaralb-admin.de
2026-08-05 23:19:23
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
HandyTreff.de
2026-08-05 10:19:50
(1 month ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -42.658 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -42.658 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0
show less
Web App Attack
Bad Web Bot