2026-06-01 08:24:33
(2 weeks ago)
Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=8
Hacking
🇧🇷
Sipo Chutão
2026-05-31 03:00:01
(2 weeks ago)
.env.backup
Hacking
🇺🇸
TPI-Abuse
2026-05-29 09:02:06
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.41.179.18 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.41.179.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 05:02:02.809372 2026] [security2:error] [pid 25132:tid 25132] [client 45.41.179.18:51297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "syscompcuenca.com"] [uri "/.env.dev"] [unique_id "ahlWCokPKtPoc26YXp0r2wAAAAc"], referer: https://www.google.com/search?q=syscompcuenca.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
AvonleaConsulting
2026-05-27 22:49:45
(2 weeks ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-27 22:00:46
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-26.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-27 17:43:12
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.41.179.18 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.41.179.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 13:43:06.383391 2026] [security2:error] [pid 28129:tid 28151] [client 45.41.179.18:56157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "birdhousefarms.com"] [uri "/.env.development.local"] [unique_id "ahctKoU_7eO-d9NOj80hiQAAAAg"], referer: https://www.google.com/search?q=birdhousefarms.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
AvonleaConsulting
2026-05-27 01:08:53
(3 weeks ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 00:21:09
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.41.179.18 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.41.179.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:21:04.424482 2026] [security2:error] [pid 20346:tid 20346] [client 45.41.179.18:57657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theprideproject.net"] [uri "/app/config/parameters.yml"] [unique_id "ahY48BrCnh8Ap8aN4ZoeGQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-27 00:20:02
(3 weeks ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 18:15:47
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.41.179.18 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.41.179.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 14:15:18.127924 2026] [security2:error] [pid 9004:tid 9004] [client 45.41.179.18:54155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "progresstraining.info"] [uri "/.env.production"] [unique_id "ahXjNo3EJGh4hRN6EyTgiQAAAAM"], referer: https://www.google.com/search?q=progresstraining.info
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-04-19 16:42:00
(1 month ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇦🇺
oncord
2024-06-08 14:31:01
(2 years ago)
Form spam
Web Spam
🇦🇺
oncord
2024-06-05 15:05:18
(2 years ago)
Form spam
Web Spam
🇺🇸
oncord
2024-06-04 03:40:27
(2 years ago)
Form spam
Web Spam
🇺🇸
oncord
2024-06-03 03:08:13
(2 years ago)
Form spam
Web Spam