🇺🇸
TPI-Abuse
2025-09-19 06:58:42
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 02:58:36.008009 2025] [security2:error] [pid 26082:tid 26082] [client 45.80.158.235:58146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smokeyspb.photos"] [uri "/.env"] [unique_id "aMz_HL7XmdFvsvy97HpKNAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-19 06:41:44
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 02:41:40.334122 2025] [security2:error] [pid 4656:tid 4656] [client 45.80.158.235:53997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dshgraphics.com"] [uri "/.env"] [unique_id "aMz7JMEU4Bdbm_JfnsyDegAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-19 00:37:24
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 20:37:16.109234 2025] [security2:error] [pid 19033:tid 19033] [client 45.80.158.235:61908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dginstruments.com"] [uri "/.env"] [unique_id "aMylvMTNyV5LghI8wDmSVgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tr1n
2025-09-18 17:59:22
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from PL.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from PL.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-18 16:06:29
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 12:06:21.442812 2025] [security2:error] [pid 11043:tid 11043] [client 45.80.158.235:50275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hardcountryrock.com"] [uri "/.env"] [unique_id "aMwt_YZdbbpK_6_n5_shmgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-14 21:15:31
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 17:15:27.740286 2025] [security2:error] [pid 13868:tid 13868] [client 45.80.158.235:50514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loriaco.com"] [uri "/.env"] [unique_id "aMcwb2PI5IIldei1_rsiHwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
GabrielJST
2025-09-14 17:13:06
(1 year ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 45.80.158.235 (NL/Th ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 45.80.158.235 (NL/The Netherlands/-)
show less
Bad Web Bot
🇦🇺
advena
2025-09-14 17:00:59
(1 year ago)
45.80.158.235 (AS210558 SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK) was intercepted at 2025-09-14 ...
show more
45.80.158.235 (AS210558 SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK) was intercepted at 2025-09-14T16:54:36Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge.
show less
Web Spam
Hacking
Brute-Force
Web App Attack
🇬🇧
Swiptly
2025-09-14 16:57:39
(1 year ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
myagent.site
2025-09-14 13:21:44
(1 year ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇳🇱
Savvii
2025-09-13 11:41:18
(1 year ago)
20 attempts against mh-misbehave-ban on ec102950
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-12 22:05:25
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 18:05:20.215243 2025] [security2:error] [pid 6824:tid 6824] [client 45.80.158.235:55517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.floridafrontiersmen.org"] [uri "/.env"] [unique_id "aMSZIBHD9XOThsyLLdosogAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-12 19:04:05
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 15:03:57.771846 2025] [security2:error] [pid 13922:tid 13922] [client 45.80.158.235:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nyemdr-online.com"] [uri "/.env"] [unique_id "aMRunRRVpnCPkBuRt92MbwAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
thedreamer.nl
2025-09-12 16:43:14
(1 year ago)
45.80.158.235 - - [12/Sep/2025:15:47:01 +0200] "GET /.env HTTP/1.1" 301 162 "-" "python-requests/2.3 ...
show more
45.80.158.235 - - [12/Sep/2025:15:47:01 +0200] "GET /.env HTTP/1.1" 301 162 "-" "python-requests/2.32.3" "NL" "-" "52.38240" "4.89950"
45.80.158.235 - - [12/Sep/2025:15:47:01 +0200] "GET /.env HTTP/1.1" 200 1007 "-" "python-requests/2.32.3" "NL" "-" "52.38240" "4.89950"
45.80.158.235 - - [12/Sep/2025:18:43:04 +0200] "GET /.env HTTP/1.1" 301 162 "-" "python-requests/2.32.3" "NL" "-" "52.38240" "4.89950"
45.80.158.235 - - [12/Sep/2025:18:43:05 +0200] "GET /.env HTTP/1.1" 200 1007 "-" "python-requests/2.32.3" "NL" "-" "52.38240" "4.89950"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-12 10:46:45
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.158.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 06:46:41.288608 2025] [security2:error] [pid 14434:tid 14434] [client 45.80.158.235:53018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notedstories.com.bridgital.com"] [uri "/.env"] [unique_id "aMP6Ea5CNJMbLKkmhrIQNgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack