🇫🇷
dynamix
2026-10-14 19:38:28
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-13 16:34:28
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-09 01:27:36
(6 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-09-28 21:45:23
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
COMPLEX
2026-09-21 07:09:38
(3 weeks ago)
Unsolicited TCP traffic | Action: DROP | Port 8443
Brute-Force
🇫🇷
dynamix
2026-09-11 19:00:08
(1 month ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-08-17 11:00:02
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 03:05:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 23:05:34.686988 2026] [security2:error] [pid 2177933:tid 2177933] [client 172.71.120.35:13845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ladylilacfarm.com"] [uri "/var/www/html/.env"] [unique_id "adXF_itU1ZKC6OYinSKK3QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 04:54:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:54:18.173769 2026] [security2:error] [pid 694696:tid 694696] [client 172.71.120.35:10057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.pjv.us"] [uri "/.env.production"] [unique_id "adSN-tPQaPG3zNoNXczUQwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 01:09:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 21:09:17.926502 2026] [security2:error] [pid 675255:tid 675255] [client 172.71.120.35:9350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armrms.com"] [uri "/.env.json"] [unique_id "adRZPVLEvzdkZJjni_q5eQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 14:49:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 10:49:13.616048 2026] [security2:error] [pid 446302:tid 446302] [client 172.71.120.35:14177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamplonaserviciotecnico.ayudaclic.com"] [uri "/docker/.env"] [unique_id "adPH6aRLwZ4UTlX8h90l8QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 07:05:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 03:05:45.319820 2026] [security2:error] [pid 13870:tid 13870] [client 172.71.120.35:12211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lindaporcello.com"] [uri "/config/.env.local"] [unique_id "adNbSQoEicypXyVqgxrsOgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 22:30:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 18:30:36.365470 2026] [security2:error] [pid 25582:tid 25582] [client 172.71.120.35:12843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.zoesaadeh.com"] [uri "/.env.bak"] [unique_id "adLijNSyFJ_BPj0E8ayRFwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 18:11:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 14:11:53.649423 2026] [security2:error] [pid 29856:tid 29856] [client 172.71.120.35:13764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.horneman.org"] [uri "/.env.bak"] [unique_id "adKl6eOcJlnytUuhYXv-UQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 11:06:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.120.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 07:06:08.128161 2026] [security2:error] [pid 28221:tid 28221] [client 172.71.120.35:12050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.trispeccorp.com"] [uri "/.env"] [unique_id "adJCIGxG04MaasB_H-NklAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
