๐ซ๐ท
dynamix
2026-10-14 02:01:30
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ง๐ช
madeit
2026-10-07 06:21:38
(2 weeks ago)
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-08-29 12:28:47
(1 month ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ฒ๐ฝ
octageeks.com
2026-05-24 04:08:26
(4 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 13:05:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 09:05:25.866609 2026] [security2:error] [pid 1159545:tid 1159545] [client 172.70.230.34:13217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mentalmolecule.com"] [uri "/.env.dev"] [unique_id "adUBFeukllVyJQTyxz-wIQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-01 21:23:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 17:23:07.151399 2026] [security2:error] [pid 25343:tid 25343] [client 172.70.230.34:13322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.scrunchiebuttbikini.com"] [uri "/backend/.env"] [unique_id "ac2Mu_7AM6e_xW0tIuUiXAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-27 12:39:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 08:39:43.558577 2026] [security2:error] [pid 3128:tid 3128] [client 172.70.230.34:11082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.toptansolar.com"] [uri "/.env.save"] [unique_id "acZ6j-oz_g5lwGJpUXLbMgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-27 10:17:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 06:17:03.964489 2026] [security2:error] [pid 20389:tid 20389] [client 172.70.230.34:12235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bbernalcom.ayudaclic.com"] [uri "/.env.old"] [unique_id "acZZH5yBsYhJRqq1sP1WmwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-27 05:25:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 01:25:48.012995 2026] [security2:error] [pid 21030:tid 21030] [client 172.70.230.34:9918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.indoorsfinishing.com"] [uri "/.env.php"] [unique_id "acYU3DiHeB267fGieW84RAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-27 03:13:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 23:13:10.740282 2026] [security2:error] [pid 29697:tid 29697] [client 172.70.230.34:9808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.angelsofrhodeisland.com"] [uri "/.env.prod"] [unique_id "acX1xmCfZae52Jd-wVhj0wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-26 23:51:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 19:51:16.535248 2026] [security2:error] [pid 5346:tid 5346] [client 172.70.230.34:11596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caleb.calebdavison.com"] [uri "/.env"] [unique_id "acXGdKX4ABusjWzJuA0tVgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-26 14:57:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 10:57:11.735583 2026] [security2:error] [pid 8634:tid 8634] [client 172.70.230.34:10047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wakims.com"] [uri "/.git/logs/HEAD"] [unique_id "acVJRxXhPCnwS3h2TeWmCwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-26 13:31:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 09:31:47.414596 2026] [security2:error] [pid 11457:tid 11457] [client 172.70.230.34:11413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.linuxforpoets.com"] [uri "/.env.backup"] [unique_id "acU1Q9GeCKMENiFBayFgxwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-26 13:12:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 09:12:02.054521 2026] [security2:error] [pid 21887:tid 21887] [client 172.70.230.34:9258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jimhermelband.com"] [uri "/.env.tmp"] [unique_id "acUwosL8rjIxVwUrFdFFegAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-26 05:20:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 01:20:52.058613 2026] [security2:error] [pid 13786:tid 13786] [client 172.70.230.34:10970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.forerunnersjazz.org"] [uri "/.env.local"] [unique_id "acTCNLrtI0Okdb3OEeugdAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack