Anonymous
2026-06-15 04:56:50
(2 days ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
MPL
2026-05-29 00:12:13
(2 weeks ago)
tcp/443 (5 or more attempts)
Port Scan
Anonymous
2026-05-23 16:17:44
(3 weeks ago)
Web App Attack
Brute-Force
Web App Attack
๐ฆ๐บ
oncord
2026-05-13 00:01:03
(1 month ago)
Form spam
Web Spam
๐ฉ๐ช
acadeova
2026-04-26 13:23:52
(1 month ago)
๐จ Recon detected (nft drop)
SRC=172.69.214.212
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=172.69.214.212
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
Anonymous
2026-04-12 06:23:42
(2 months ago)
Web App Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 09:02:09
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:02:03.099713 2026] [security2:error] [pid 15760:tid 15760] [client 172.69.214.212:9318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.realclean.net"] [uri "/.env_settings"] [unique_id "adIlCz2FIvQAzl2bQpsrbAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 23:37:03
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 19:36:55.605401 2026] [security2:error] [pid 732:tid 732] [client 172.69.214.212:12644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.juca.com.mx"] [uri "/.env"] [unique_id "adGgl7-DQPFTJen_O-a0WgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 19:54:23
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 15:54:15.792986 2026] [security2:error] [pid 18412:tid 18412] [client 172.69.214.212:13069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vatnpure.com"] [uri "/.env.development.local"] [unique_id "adFsZwtTwK5Cp7qzFaUyFQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 14:59:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 10:59:53.189756 2026] [security2:error] [pid 30566:tid 30566] [client 172.69.214.212:10508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centralbaptistalcoa.org"] [uri "/server/.env"] [unique_id "adEnafe6fcosxDwh-UAwxAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 13:19:46
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 09:19:41.413645 2026] [security2:error] [pid 8278:tid 8278] [client 172.69.214.212:11293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.skyfall-estate.com"] [uri "/.git/refs/heads/main"] [unique_id "adEP7Tb68P5fdcEVMG2Y1QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 09:15:10
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 05:14:56.041084 2026] [security2:error] [pid 6242:tid 6242] [client 172.69.214.212:12526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.imbrasacademic.com"] [uri "/.env.development"] [unique_id "adDWkCPlQTPc4ks05bOV4wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 07:46:41
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:46:34.120806 2026] [security2:error] [pid 14755:tid 14755] [client 172.69.214.212:13203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bairentang.org"] [uri "/srv/.env"] [unique_id "adDB2vULS9acmW1MwgsA7QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 06:55:42
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 02:55:32.323034 2026] [security2:error] [pid 10273:tid 10273] [client 172.69.214.212:9477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.csems.org"] [uri "/.env.production"] [unique_id "adC15Ghmpi2__rqxoAmZtgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 06:10:22
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 02:10:16.494524 2026] [security2:error] [pid 6694:tid 6694] [client 172.69.214.212:10320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jdubindustries.jonathanwilson.me"] [uri "/config/.env.local"] [unique_id "adCrSE1hinJoJr_5uAcdDgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack