๐ฉ๐ช
LavrinenkoRM
2026-09-18 23:26:56
(19 hours ago)
Sentinel WAF: web/kids.rozfarbui.org.ua; Honeypot URL; confidence=90; blocked_at=2026-09-18T23:06:36 ...
show more
Sentinel WAF: web/kids.rozfarbui.org.ua; Honeypot URL; confidence=90; blocked_at=2026-09-18T23:06:36.012638+00:00
show less
Web App Attack
๐ง๐ช
madeit
2026-09-04 09:46:14
(2 weeks ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 10:55:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 06:55:24.448748 2026] [security2:error] [pid 1038559:tid 1038559] [client 172.69.130.8:11341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.goseethenurse.com"] [uri "/.env.backup"] [unique_id "adTinI9Nacg55eD4ihh6aQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 04:21:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:21:25.394102 2026] [security2:error] [pid 959140:tid 959140] [client 172.69.130.8:13917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nashes.net"] [uri "/.env.tmp"] [unique_id "adSGRR7BZgVU8OpJk-OO-QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-06 21:14:41
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 17:14:37.534086 2026] [security2:error] [pid 505326:tid 505326] [client 172.69.130.8:13977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.xmas.martinka.org"] [uri "/.env.staging"] [unique_id "adQiPdI-yh4A1nc-COQGnQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-06 16:41:57
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 12:41:48.715719 2026] [security2:error] [pid 459654:tid 459654] [client 172.69.130.8:10561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ruthmartin.org"] [uri "/private/.env"] [unique_id "adPiTBw--_5aI1PkViLWIwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-06 08:26:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 04:26:46.946360 2026] [security2:error] [pid 15128:tid 15128] [client 172.69.130.8:11421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.clearlakelots.com"] [uri "/app/.env"] [unique_id "adNuRnLITCt-T8grQfpb0wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-06 05:38:30
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:38:24.902428 2026] [security2:error] [pid 25834:tid 25834] [client 172.69.130.8:9435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.skp.hk"] [uri "/.env.production.bak"] [unique_id "adNG0JaYjpUEhaqTCR8CzgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 19:05:30
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 15:05:24.658858 2026] [security2:error] [pid 5900:tid 5900] [client 172.69.130.8:14116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "equipoperu.org"] [uri "/admin/.env"] [unique_id "adKydMhAhvRb8NYLY68j4AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 15:04:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 11:04:41.757733 2026] [security2:error] [pid 32212:tid 32212] [client 172.69.130.8:13120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.stepiz62.com"] [uri "/config/.env"] [unique_id "adJ6CcPKamaiG222rvGsGgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 20:54:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 16:54:27.876870 2026] [security2:error] [pid 18711:tid 18820] [client 172.69.130.8:11772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southsideeconomic.digital4z.com"] [uri "/.env.local"] [unique_id "adF6g0clhB5aBbdPy8SM2gAAAU4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 19:33:18
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 15:33:10.743443 2026] [security2:error] [pid 8226:tid 8226] [client 172.69.130.8:9912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vollmer.ws"] [uri "/.env.php"] [unique_id "adFndkFZLzCQejLQ98yf4AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 17:04:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 13:03:59.536685 2026] [security2:error] [pid 25817:tid 25817] [client 172.69.130.8:12933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starktigers75.com"] [uri "/api/.env"] [unique_id "adFEfzCwfK12X22XGwlJewAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 16:32:23
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 12:32:13.934178 2026] [security2:error] [pid 26898:tid 26898] [client 172.69.130.8:10536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sekizinci.com"] [uri "/.env.bak"] [unique_id "adE9DeUU_u7NKeQFHJBRHgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 14:38:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.130.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 10:37:55.356554 2026] [security2:error] [pid 23576:tid 23576] [client 172.69.130.8:13883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tangastarot.okwellbeing.com"] [uri "/core/.env"] [unique_id "adEiQ6fYSwzMtUQi0F3kMQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack