🇺🇸
TPI-Abuse
2026-11-07 06:20:26
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 146.70.34.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 01:20:18.975947 2026] [security2:error] [pid 3817:tid 3817] [client 146.70.34.75:46755] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.34.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 01:20:18.975947 2026] [security2:error] [pid 3817:tid 3817] [client 146.70.34.75:46755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aslanhan.com"] [uri "/.git/config"] [unique_id "au7DIu_9VsA0tYyYT3e59QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:51:15
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 146.70.34.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:51:04.316495 2026] [security2:error] [pid 12896:tid 12896] [client 146.70.34.75:0] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.34.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:51:04.316495 2026] [security2:error] [pid 12896:tid 12896] [client 146.70.34.75:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gibit.me"] [uri "/.env.staging"] [unique_id "au1OqL4CXCnh4LcOROn0EgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
impra
2026-11-04 12:16:00
UTC ·
(3 days ago)
Malicious web requests (vulnerability probing / path scanning) seen at our Cloudflare edge.
Web App Attack
Bad Web Bot
🇫🇷
ELYAZ
2026-11-04 07:10:08
UTC ·
(3 days ago)
(y3) Failed access -byebye- from 146.70.34.75 (US/United States/-): (CF_ENABLE)
Hacking
🇩🇪
Live Home Cams
2026-11-04 06:59:58
UTC ·
(3 days ago)
WebApp brute force attack detected. Multiple file scanning attempts from 146.70.34.75. Detected by fail2ban.
Web App Attack
Brute-Force
🇩🇪
arnisolutions
2026-11-04 02:45:27
UTC ·
(4 days ago)
Mass vulnerability scanning (LFI / path traversal probes with query parameters such as lokasie=/proc/...) against a production server. Observed on 1 day(s) between 2026-11-04 and 2026-11-04 (UTC). Additional activity: badscanner. 2 further address(es ...
show more
Mass vulnerability scanning (LFI / path traversal probes with query parameters such as lokasie=/proc/...) against a production server. Observed on 1 day(s) between 2026-11-04 and 2026-11-04 (UTC). Additional activity: badscanner. 2 further address(es) from the same network showed abusive behaviour. Sample request: GET /wp-admin/admin-ajax.php HTTP/2.0
show less
Web App Attack
Hacking
🇳🇱
Mangelot Hosting
2026-11-04 01:57:34
UTC ·
(4 days ago)
(modsec_attack) srv201 ModSecurity attack 146.70.34.75 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇩🇪
Vegascosmetics
2026-10-30 04:22:07
UTC ·
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env)
Hacking
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-26 02:51:24
UTC ·
(1 week ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 146.70.34.75 - - [26/Oct/2026:03:51:01 +0100] "GET /api/.env HTTP/1.1" 404 5070 "-" "AuthorizedWebExposureAuditor/3.0"
...
Bad Web Bot
Web App Attack
2026-10-24 20:00:04
UTC ·
(2 weeks ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 03:35:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 146.70.34.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 23:34:58.062334 2026] [security2:error] [pid 25811:tid 25811] [client 146.70.34.75:48652] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.34.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 23:34:58.062334 2026] [security2:error] [pid 25811:tid 25811] [client 146.70.34.75:48652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bobbylint.com"] [uri "/public/.env"] [unique_id "atbhYjTvUQVX9xhIsp5suQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-19 10:45:17
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-19 07:12:44
UTC ·
(2 weeks ago)
Sensitive File Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 01:45:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 146.70.34.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 21:45:23.105788 2026] [security2:error] [pid 8608:tid 8760] [client 146.70.34.75:32978] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.34.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 21:45:23.105788 2026] [security2:error] [pid 8608:tid 8760] [client 146.70.34.75:32978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sujugada.com"] [uri "/.env.testing"] [unique_id "atV2M1FLS7H2mPib5mZnXQAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Gem
2026-06-05 22:10:00
UTC ·
(5 months ago)
Unauthorized web scan.
Web App Attack
