🇫🇷
dynamix
2026-10-10 20:20:18
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-01 12:06:07
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-19 12:19:06
(3 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-06 04:54:51
(1 month ago)
Web App Attack
2026-08-28 04:32:49
(1 month ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇧🇪
madeit
2026-08-10 05:51:51
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 17:24:06
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:23:54.605074 2026] [security2:error] [pid 11189:tid 11189] [client 172.70.175.35:10250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.orangecountyrehearsal.virlouise.com"] [uri "/.env.vercel"] [unique_id "ahSFqiPxfVmp8iHjthOMZQAAAAA"], referer: https://www.google.com/search?q=www.orangecountyrehearsal.virlouise.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 02:38:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 22:38:44.851149 2026] [security2:error] [pid 885522:tid 885522] [client 172.70.175.35:12038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.californiacbcdelegation.com"] [uri "/.env.development"] [unique_id "adRuNAFrohuTso9x3wP_awAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 11:22:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 07:22:22.296905 2026] [security2:error] [pid 19732:tid 19732] [client 172.70.175.35:11150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lfrmtmorris.encoremtmorris.com"] [uri "/.env.dev"] [unique_id "adOXbqN1F8oU0zo1AUVkyQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 13:21:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 09:21:18.923804 2026] [security2:error] [pid 17410:tid 17410] [client 172.70.175.35:13460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.maunakeavista.com"] [uri "/.env"] [unique_id "adJhzhHjBDS9Foq4v6-xEgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 10:51:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 06:50:58.351273 2026] [security2:error] [pid 22888:tid 22888] [client 172.70.175.35:12535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.millcitymakers.com"] [uri "/.env.production.local"] [unique_id "adI-kkRVPtj2RifY3OP88AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 05:34:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 01:34:36.629168 2026] [security2:error] [pid 19598:tid 19598] [client 172.70.175.35:10118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jessicabaer.com"] [uri "/.env.dist"] [unique_id "adH0bM4QTbJcASHLeSBvsQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 08:37:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 04:37:51.159595 2026] [security2:error] [pid 10475:tid 10475] [client 172.70.175.35:9642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fasllc.co"] [uri "/.env.save"] [unique_id "adDN35G5pX3vJTofNsQ7ngAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 05:00:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:00:28.044189 2026] [security2:error] [pid 26286:tid 26286] [client 172.70.175.35:12518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thewritekellys.com"] [uri "/.env.example"] [unique_id "adCa7BeoDx-bR1xWq0xQ0AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 12:38:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 08:38:24.863765 2026] [security2:error] [pid 5975:tid 5975] [client 172.70.175.35:9907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.uraniumjewelry.com"] [uri "/.env.bak"] [unique_id "ac-0wFdd9Vd7R_nvRNlHkgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
