🇧🇪
madeit
2026-10-16 01:34:32
(2 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 00:31:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 20:31:02.534970 2026] [security2:error] [pid 32132:tid 32132] [client 172.70.110.15:10346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solidthought.com"] [uri "/.env"] [unique_id "asmHRohzmeCyEsz4qecvugAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-09 14:02:05
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:02:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:02:07.432319 2026] [security2:error] [pid 3095:tid 3095] [client 172.70.110.15:11832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bencramer.org"] [uri "/wp-config.php.save"] [unique_id "asfMj669qYErT-VChuqMxwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 11:19:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 07:19:30.874522 2026] [security2:error] [pid 25865:tid 25881] [client 172.70.110.15:10125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jd-web-designs.com"] [uri "/.env.backup"] [unique_id "asd8QsyzrLqHJH-WCAryJQAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 12:17:40
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 08:17:36.686721 2026] [security2:error] [pid 26692:tid 26692] [client 172.70.110.15:9363] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||owengmail.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "owengmail.com"] [uri "/index.php.bak"] [unique_id "asOVYBO98YHN5l2k1ugOkQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-02 20:49:55
(2 weeks ago)
Web App Attack
🇫🇷
dynamix
2026-10-01 14:38:53
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-12 05:14:46
(1 month ago)
Web App Attack
🇺🇸
mawan
2026-07-12 11:47:32
(3 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
mnsf
2026-06-16 00:16:18
(4 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 16:37:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 12:36:58.328129 2026] [security2:error] [pid 27994:tid 27994] [client 172.70.110.15:10261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldandsilverni.com"] [uri "/web/.env"] [unique_id "aclVKriqYpnrHhcYIYjYXwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 14:30:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 10:30:06.899500 2026] [security2:error] [pid 18162:tid 18162] [client 172.70.110.15:11924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ji-technovation.com"] [uri "/.env.production"] [unique_id "ab6rbiJIzsx2ARtZGMzQtwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 02:58:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 22:58:10.122708 2026] [security2:error] [pid 18682:tid 18682] [client 172.70.110.15:10225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sneedvillefarmersmarket.com"] [uri "/private/.env"] [unique_id "ab4JQlXFlkfevCt980qarQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:13:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.110.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:13:38.767690 2026] [security2:error] [pid 32566:tid 32566] [client 172.70.110.15:10405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thoughtage.com"] [uri "/srv/.env"] [unique_id "ab3iskVAK-IzOQYWXnSMCwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
