🇧🇪
madeit
2026-09-26 15:18:29
(23 hours ago)
Web App Attack
🇧🇪
madeit
2026-08-30 06:48:32
(4 weeks ago)
Web App Attack
🇵🇱
MatStef132
2026-08-29 09:34:52
(4 weeks ago)
MatShield L7: blocked on api.klovy.chat (ua-quarantined)
Bad Web Bot
🇧🇪
madeit
2026-08-20 18:58:00
(1 month ago)
Web App Attack
🇨🇿
Prcek
2026-07-23 05:32:23
(2 months ago)
PortScan:HOST=172.70.111.80,DPORTS=443
Port Scan
2026-04-17 12:21:29
(5 months ago)
Web App Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 03:56:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 23:56:31.730649 2026] [security2:error] [pid 9858:tid 9858] [client 172.70.111.80:10684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jerusalem-temple-today.com"] [uri "/docker/.env"] [unique_id "actF76v-GBPJlH1mUMOrZQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 04:40:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 00:40:23.369110 2026] [security2:error] [pid 23511:tid 23511] [client 172.70.111.80:12342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.paintingqueen.com"] [uri "/.env.container"] [unique_id "ab4hN4xA-1PLthFCgOcGjAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 01:36:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:36:34.176292 2026] [security2:error] [pid 4501:tid 4607] [client 172.70.111.80:13240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.okorganicgardening.org"] [uri "/backend/.env"] [unique_id "ab32Iu_ITbNHKXWCwsdGiwAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:15:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:15:45.276630 2026] [security2:error] [pid 23328:tid 23328] [client 172.70.111.80:11773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.icbsmonitor.net"] [uri "/.env.dev"] [unique_id "ab3jMc5Uzs17qMS7ICd3QgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-03-20 17:05:49
(6 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 09:05:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:05:10.369676 2026] [security2:error] [pid 10817:tid 10817] [client 172.70.111.80:9222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.naturalhomebuilders.com"] [uri "/.env~"] [unique_id "ab0NxklRdeQM747i5EWV8gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:53:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:53:23.075378 2026] [security2:error] [pid 20559:tid 20559] [client 172.70.111.80:11279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.calentadoresdemexico.com.mx"] [uri "/.env.local.backup"] [unique_id "abz88yLcmCNXCgnQREicFgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 07:33:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 03:33:52.747423 2026] [security2:error] [pid 12770:tid 12814] [client 172.70.111.80:13451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.arthansl.com"] [uri "/api/.env"] [unique_id "abz4YKV1d1oSZJFzzB_0cQAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 04:11:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.111.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 00:11:29.705686 2026] [security2:error] [pid 21362:tid 21362] [client 172.70.111.80:12360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.travelwithjenniferb.com"] [uri "/.env.tmp"] [unique_id "abzI8UPMNxokxNV_KgZMjwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
