🇺🇸
TPI-Abuse
2026-08-18 03:29:02
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 23:28:54.392747 2026] [security2:error] [pid 27239:tid 27257] [client 172.70.134.181:12698] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 23:28:54.392747 2026] [security2:error] [pid 27239:tid 27257] [client 172.70.134.181:12698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.southtampaprinting.com"] [uri "/.git/config"] [unique_id "aoPRdoM49n4kaog4nngCeAAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-08-17 05:49:49
UTC ·
(2 months ago)
[MonAug1707:49:46.3677202026][security2:error][pid2121367:tid2121643][client172.70.134.181:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"9607 ...
show more
[MonAug1707:49:46.3677202026][security2:error][pid2121367:tid2121643][client172.70.134.181:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.swiss-web-hosting.hostingedominio.net\"][uri\"/.git/HEAD\"][unique_id\"aoKg-vedbE2tvtDcWMjgYAAAAJM\"]
show less
Hacking
Web App Attack
🇧🇪
madeit
2026-08-06 14:29:19
UTC ·
(3 months ago)
Web App Attack
🇺🇸
mnsf
2026-04-08 05:07:18
UTC ·
(7 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 18:38:37
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 14:38:28.830564 2026] [security2:error] [pid 17141:tid 17141] [client 172.70.134.181:11416] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 14:38:28.830564 2026] [security2:error] [pid 17141:tid 17141] [client 172.70.134.181:11416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.fastquizmaker.com"] [uri "/.env.example"] [unique_id "acrDJJWNK-OHdmqqzAa7QAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:26:13
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:26:06.778092 2026] [security2:error] [pid 5283:tid 5289] [client 172.70.134.181:12207] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:26:06.778092 2026] [security2:error] [pid 5283:tid 5289] [client 172.70.134.181:12207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pixelpushersdesign.com"] [uri "/.env.docker"] [unique_id "acqyLopES9lCA7Wzvm4MEAAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 14:26:33
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 10:26:27.090395 2026] [security2:error] [pid 8808:tid 8808] [client 172.70.134.181:11164] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 10:26:27.090395 2026] [security2:error] [pid 8808:tid 8808] [client 172.70.134.181:11164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thecrossing1.com"] [uri "/.env_backup"] [unique_id "acqIE_Kwg1Sd0WVUCrVRMwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 12:58:33
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:58:25.019455 2026] [security2:error] [pid 23452:tid 23452] [client 172.70.134.181:10507] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:58:25.019455 2026] [security2:error] [pid 23452:tid 23452] [client 172.70.134.181:10507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.greensealusa.com"] [uri "/.env.local"] [unique_id "acpzcRD26fII8bbmVQh_JwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:30:59
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:30:51.722097 2026] [security2:error] [pid 12028:tid 12028] [client 172.70.134.181:10911] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:30:51.722097 2026] [security2:error] [pid 12028:tid 12028] [client 172.70.134.181:10911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alanmariotti.com"] [uri "/web/.env"] [unique_id "acpe65CtVdMXBwChqfCgLAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 06:12:46
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 02:12:35.462171 2026] [security2:error] [pid 691:tid 691] [client 172.70.134.181:11065] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 02:12:35.462171 2026] [security2:error] [pid 691:tid 691] [client 172.70.134.181:11065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.b2c-llc.com"] [uri "/.env.php"] [unique_id "acoUU4XNCb8gg1xA5LaHXQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 04:53:45
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 00:53:39.827071 2026] [security2:error] [pid 26505:tid 26505] [client 172.70.134.181:13143] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 00:53:39.827071 2026] [security2:error] [pid 26505:tid 26505] [client 172.70.134.181:13143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.asian-aerospace.christinepeat.com"] [uri "/.env.test"] [unique_id "acoB00ZWJGcgzhL3XfWyKQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 02:15:09
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 22:14:58.475981 2026] [security2:error] [pid 7086:tid 7086] [client 172.70.134.181:10432] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 22:14:58.475981 2026] [security2:error] [pid 7086:tid 7086] [client 172.70.134.181:10432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.97films.media"] [uri "/admin/.env"] [unique_id "acncoksb_U-o3afTCJriTgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 01:41:53
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 21:41:49.147313 2026] [security2:error] [pid 7284:tid 7284] [client 172.70.134.181:13410] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 21:41:49.147313 2026] [security2:error] [pid 7284:tid 7284] [client 172.70.134.181:13410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.q-hse.net"] [uri "/srv/.env"] [unique_id "acnU3aEoMWvN8jLjVXQ29QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 00:46:51
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 20:46:46.251070 2026] [security2:error] [pid 28108:tid 28108] [client 172.70.134.181:14234] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 20:46:46.251070 2026] [security2:error] [pid 28108:tid 28108] [client 172.70.134.181:14234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.realclean.net"] [uri "/config/.env.local"] [unique_id "acnH9t0TLPcG4LS8lrjYWAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 22:15:44
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 18:15:35.712033 2026] [security2:error] [pid 6320:tid 6324] [client 172.70.134.181:11345] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 18:15:35.712033 2026] [security2:error] [pid 6320:tid 6324] [client 172.70.134.181:11345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.magusincognito.com"] [uri "/.env.save"] [unique_id "acmkh9lbJZZkgCFXL-BdoAAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack