🇨🇦
polycoda
2026-08-27 11:37:04
(2 days ago)
📄 Probes for tons of inexistent files and/or PHP scripts
Hacking
Web App Attack
🇺🇸
kosada.com
2026-08-13 22:26:10
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇪🇸
NullBlue
2026-07-17 09:25:07
(1 month ago)
Bad web bot / recon against honeypot. Captured by NullBlue67 honeypot.
Bad Web Bot
Web App Attack
2026-07-15 22:02:07
(1 month ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 17:37:47
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 13:37:39.909828 2026] [security2:error] [pid 7943:tid 7943] [client 43.243.192.97:12620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fgrotary.org"] [uri "/.env.production"] [unique_id "aklE4-_QzrVrL0d0tAHbHwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 12:42:13
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 08:42:10.006460 2026] [security2:error] [pid 23152:tid 23152] [client 43.243.192.97:59864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "equipoperu.org"] [uri "/.env.production"] [unique_id "akj_ovJ2d-CgiyZocY37EQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 11:50:01
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 07:49:53.011381 2026] [security2:error] [pid 25608:tid 25608] [client 43.243.192.97:39774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidtempleofdeliverance.org"] [uri "/wp-config.bak"] [unique_id "akeh4TN05LljAHs8GCWHLwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 21:50:47
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 17:50:42.731481 2026] [security2:error] [pid 3124:tid 3124] [client 43.243.192.97:43922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "commonthreadsvt.org"] [uri "/.env.staging"] [unique_id "akbdMnmM11o6cIvNVp3cfwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 19:29:05
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 15:28:59.026239 2026] [security2:error] [pid 6777:tid 6777] [client 43.243.192.97:59368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolingsprings.org"] [uri "/.env.development"] [unique_id "aka7-6-OJad4ckOxD4HLjQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 18:20:56
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 14:20:50.180070 2026] [security2:error] [pid 3550:tid 3550] [client 43.243.192.97:51090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conquesticon.org"] [uri "/.env"] [unique_id "akasAnN08rgaEuqYcecRXAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 14:57:06
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 10:56:59.911208 2026] [security2:error] [pid 27993:tid 27993] [client 43.243.192.97:32668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.circulodesonido.org"] [uri "/.env.local"] [unique_id "akZ8O63CnADraaCf0QHsmQAAABA"], referer: https://circulodesonido.org/.env.local
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 22:02:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 18:02:25.656225 2026] [security2:error] [pid 9466:tid 9466] [client 43.243.192.97:53526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carpentersbattery.org"] [uri "/.env.local"] [unique_id "akWOcUh6B7wLq9OdtqUw9gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
brightenfield
2026-07-01 12:38:45
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 18:08:19
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 14:08:14.730074 2026] [security2:error] [pid 13563:tid 13573] [client 43.243.192.97:18738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ayubhamdardfoundation.org"] [uri "/.env"] [unique_id "akQGDvSRYEe5Qz0hVnu5PAAAAMU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 14:44:32
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 43.243.192.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 10:44:26.214153 2026] [security2:error] [pid 4497:tid 4497] [client 43.243.192.97:59576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "athletefirst.org"] [uri "/wp-config.bak"] [unique_id "akPWSrJnKiWHYeoF2GhbFAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
