๐ซ๐ท
dynamix
2026-10-15 17:37:34
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-10-11 03:44:56
(6 days ago)
Multiple WAF Violations
Web App Attack
๐ง๐ช
madeit
2026-09-23 20:33:13
(3 weeks ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 20:23:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:23:23.023681 2026] [security2:error] [pid 17686:tid 17686] [client 172.69.130.214:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.webuildbeaches.com"] [uri "/.git/config"] [unique_id "aqmpO53nFQvAUeKxJauDsQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
chengkev
2026-09-01 03:25:20
(1 month ago)
Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ง๐ช
madeit
2026-08-21 20:02:26
(1 month ago)
Web App Attack
๐ง๐ช
madeit
2026-08-13 21:33:01
(2 months ago)
Web App Attack
๐ซ๐ท
chengkev
2026-06-26 13:34:54
(3 months ago)
Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-probing
Web App Attack
Hacking
๐ช๐ธ
antivoid.xyz
2026-05-12 05:45:26
(5 months ago)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-06 16:32:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 12:32:37.720438 2026] [security2:error] [pid 724115:tid 724115] [client 172.69.130.214:11840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.robertwhitbeck.com"] [uri "/.env_backup"] [unique_id "adPgJZXVTjGbzU2ig_bYwAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-06 06:37:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 02:37:45.374752 2026] [security2:error] [pid 13872:tid 13872] [client 172.69.130.214:12617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.silvermoonpizza.com"] [uri "/.env.development"] [unique_id "adNUuXQ8QN-9IQ1sF19WjgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 16:48:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 12:48:48.209184 2026] [security2:error] [pid 29578:tid 29578] [client 172.69.130.214:13857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mewebdesign.com"] [uri "/.env"] [unique_id "adKScAjNfS1Ua0tBWAKeywAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 04:57:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 00:57:48.811476 2026] [security2:error] [pid 13500:tid 13500] [client 172.69.130.214:13537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sidkha.com"] [uri "/config/.env.local"] [unique_id "adHrzAG8A4_ecWbhuMr_ngAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 02:56:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 22:56:51.974631 2026] [security2:error] [pid 22776:tid 22776] [client 172.69.130.214:10058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cmcnow.com"] [uri "/.env.production"] [unique_id "adHPc789ySIeM2Zccq8_RgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 23:55:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 19:55:26.259472 2026] [security2:error] [pid 2094:tid 2094] [client 172.69.130.214:10829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.grayhost.net"] [uri "/.env.staging"] [unique_id "adGk7hcBKnLOt0V6WFSTcAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack