๐น๐ท
ScchutzZ
2026-10-24 08:05:05
(15 hours ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
๐ซ๐ท
dynamix
2026-10-17 21:17:10
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ต๐ฐ
sbk97 (https://sayor.net)
2026-10-04 07:42:32
(2 weeks ago)
SAYOR honeypot: observed attack /xmlrpc.php
Brute-Force
๐ง๐ช
madeit
2026-09-24 04:53:04
(1 month ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-20 00:19:28
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 20:19:19.382203 2026] [security2:error] [pid 3243:tid 3243] [client 172.69.214.60:13318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lonescouting.us"] [uri "/.git/HEAD"] [unique_id "aoZIB0Xa5cHMsh6l3EYVsQAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 13:16:59
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 09:16:54.444078 2026] [security2:error] [pid 25954:tid 25954] [client 172.69.214.60:12707] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.thebradleyclinic.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.thebradleyclinic.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ajvYxk-7yny_InFYLMUS6gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 14:57:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 10:57:44.217516 2026] [security2:error] [pid 30893:tid 30893] [client 172.69.214.60:14121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mandytony.tonylai.com"] [uri "/.env.save"] [unique_id "adJ4aCpWJHKKFia_NdFRbAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 13:05:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 09:05:24.784728 2026] [security2:error] [pid 4559:tid 4559] [client 172.69.214.60:12127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.suralcopensioendesk.com"] [uri "/server/.env"] [unique_id "adJeFMqUPJsOCAT2CpmaoAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 09:25:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:25:00.596201 2026] [security2:error] [pid 11157:tid 11157] [client 172.69.214.60:12713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.intnlc.org"] [uri "/.env.orig"] [unique_id "adIqbNOpF5ME3El5eLjB8AAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 14:49:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 10:49:45.599927 2026] [security2:error] [pid 23336:tid 23336] [client 172.69.214.60:13623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.astariamusic.com"] [uri "/var/www/.env"] [unique_id "adElCXQ2C0dO3gfn_ScQQwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 13:27:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 09:27:42.201664 2026] [security2:error] [pid 16087:tid 16087] [client 172.69.214.60:13929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.assheton.com"] [uri "/.env.development.local"] [unique_id "adERzrl-7r_241q6474KVAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 10:13:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 06:13:35.443949 2026] [security2:error] [pid 29533:tid 29533] [client 172.69.214.60:12920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.itony.com"] [uri "/.env.example"] [unique_id "adDkT7OAjFayOwgPlAga-QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 06:06:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 02:05:59.949478 2026] [security2:error] [pid 23678:tid 23678] [client 172.69.214.60:14045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.wurkroom.biz"] [uri "/.env.test"] [unique_id "adCqR2xQ3Ry3mNjFiihs6gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 04:58:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 00:58:50.012751 2026] [security2:error] [pid 16669:tid 16685] [client 172.69.214.60:11541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dermatologycoloradosprings.com.aafm.us"] [uri "/www/.env"] [unique_id "adCair6nOAGSmqnJXlPg-wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-04 03:49:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 23:49:14.582832 2026] [security2:error] [pid 11138:tid 11138] [client 172.69.214.60:12489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kentculotta.com"] [uri "/.env_backup"] [unique_id "adCKOi7rROl_d6BZE0r5bwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
