🇺🇸
TPI-Abuse
2026-10-07 13:00:10
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 09:00:02.526241 2026] [security2:error] [pid 9146:tid 9146] [client 172.70.111.119:11513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidtempleofdeliverance.org"] [uri "/.env.local"] [unique_id "asZCUoX2U7uQFqJqz2W_mwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-07 02:24:16
(21 hours ago)
[Wed Oct 07 04:24:14.546485 2026] [authz_core:error] [pid 28600] [client 172.70.111.119:10478] AH016 ...
show more
[Wed Oct 07 04:24:14.546485 2026] [authz_core:error] [pid 28600] [client 172.70.111.119:10478] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Oct 07 04:24:15.105689 2026] [authz_core:error] [pid 28600] [client 172.70.111.119:10478] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Oct 07 04:24:15.463727 2026] [authz_core:error] [pid 28600] [client 172.70.111.119:10478] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 00:49:23
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:49:19.501635 2026] [security2:error] [pid 6742:tid 6742] [client 172.70.111.119:10540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3n1ent.com"] [uri "/.env.backup"] [unique_id "asWXD1_yjIJYHkZKbd63kgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 11:50:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 07:50:45.879789 2026] [security2:error] [pid 7143:tid 7143] [client 172.70.111.119:12625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drainpoultry.com"] [uri "/.svn/entries"] [unique_id "asTglc7rCjKze1j0f4MggAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-05 10:41:36
(2 days ago)
[Mon Oct 05 12:41:34.561681 2026] [authz_core:error] [pid 29207] [client 172.70.111.119:12505] AH016 ...
show more
[Mon Oct 05 12:41:34.561681 2026] [authz_core:error] [pid 29207] [client 172.70.111.119:12505] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Oct 05 12:41:35.151809 2026] [authz_core:error] [pid 29207] [client 172.70.111.119:12505] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Oct 05 12:41:35.477542 2026] [authz_core:error] [pid 29207] [client 172.70.111.119:12505] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇩🇪
Jochen Pretli
2026-10-04 22:03:57
(3 days ago)
connection to honeypot
Email Spam
Port Scan
🇧🇪
madeit
2026-09-29 19:03:55
(1 week ago)
Web App Attack
🇧🇷
chronos
2026-09-13 17:09:39
(3 weeks ago)
2026-09-13 13:42:56 UTC-3||Unauthorized connection attempt detected for port scanning
Port Scan
🇧🇪
madeit
2026-08-29 21:06:42
(1 month ago)
Web App Attack
🇺🇸
canine.tools
2026-07-30 18:46:43
(2 months ago)
[fail2ban Auto Report] {"time":"2026-07-30T14:46:42.888068554-04:00","level":"INFO","source":{"funct ...
show more
[fail2ban Auto Report] {"time":"2026-07-30T14:46:42.888068554-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/search","user_agent":"","accept_language":"","priority":"","x-forwarded-for":"172.70.111.119","x-real-ip":"172.70.111.119","host":"searxng.canine.tools","check_result":{"name":"bot/no-user-agent-string","rule":"DENY","weight":15}}
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-22 13:11:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 09:11:17.540340 2026] [security2:error] [pid 3763:tid 3763] [client 172.70.111.119:9232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.theknowledgemaster.com"] [uri "/.env.production"] [unique_id "ab_qdZvIg3HaNEDBs__cBwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 01:23:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 21:23:31.777465 2026] [security2:error] [pid 5292:tid 5292] [client 172.70.111.119:13663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fydelity.net"] [uri "/.env.bak"] [unique_id "ab9Ek6zq95mp_dBgXTEU2AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 02:56:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 22:56:06.127215 2026] [security2:error] [pid 27892:tid 27892] [client 172.70.111.119:13949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazedbyu.com"] [uri "/.env_config"] [unique_id "ab4Ixrq0asANmvwRN8fiLAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 01:59:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:59:11.733534 2026] [security2:error] [pid 22319:tid 22319] [client 172.70.111.119:11802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dancingmountainsbrewing.com"] [uri "/.env.development"] [unique_id "ab37b-mnserPHImeZ1n3aAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 01:41:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:41:22.433286 2026] [security2:error] [pid 13198:tid 13198] [client 172.70.111.119:11186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oldbackup.myomni.us"] [uri "/private/.env"] [unique_id "ab33QpcMVhfQHEUAbEcwpQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
