🇻🇳
cimee
2026-09-11 02:48:56
(1 day ago)
This IP accessed the path /.env, which is banned.
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-06 10:48:40
(5 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 22:38:04
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 18:37:56.156216 2026] [security2:error] [pid 16601:tid 16609] [client 172.70.134.2:11941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.condobudget.com"] [uri "/.git/config"] [unique_id "aoONREa3sp9VsscgSk-aVgAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 07:37:28
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 03:37:20.800697 2026] [security2:error] [pid 14806:tid 14806] [client 172.70.134.2:13223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "w3.chilako.com"] [uri "/.git/config"] [unique_id "aoFosM2iWclJ-XU8VAOa3QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 01:27:38
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 21:27:31.288675 2026] [security2:error] [pid 30164:tid 30164] [client 172.70.134.2:11389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegattrells.com"] [uri "/.git/config"] [unique_id "aoESAzGVCmaxs54MYP6smAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-21 22:05:28
(4 months ago)
Auto-ban: >3000 req/min op 2026-04-21
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-03-31 00:35:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 20:35:08.936173 2026] [security2:error] [pid 19032:tid 19032] [client 172.70.134.2:10681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.swcbsa.org"] [uri "/docker/.env.local"] [unique_id "acsWvKaUZOK1ONJa6mqn9QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:26:14
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:26:06.137186 2026] [security2:error] [pid 5286:tid 5358] [client 172.70.134.2:9836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pixelpushersdesign.com"] [uri "/.env.dist"] [unique_id "acqyLpFEMmdQGzU0PVgzLAAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:59:03
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:58:56.774394 2026] [security2:error] [pid 3352:tid 3352] [client 172.70.134.2:9720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lemoulinavent.org"] [uri "/.env.docker"] [unique_id "acqBoDhAK8VbaqpmoluvugAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 12:24:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:24:43.140134 2026] [security2:error] [pid 5054:tid 5054] [client 172.70.134.2:12121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "interculturaldimensions.org"] [uri "/.env_backup"] [unique_id "acpriytQY8ZL6uoaw13eQwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 10:36:57
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 06:36:47.713113 2026] [security2:error] [pid 32541:tid 32541] [client 172.70.134.2:9418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.outofthebluephotography.com"] [uri "/.env.bak"] [unique_id "acpSP3Ap0drwPAotF4IbkwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 09:53:13
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 05:53:08.791504 2026] [security2:error] [pid 5744:tid 5744] [client 172.70.134.2:10839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiireservations.com.kh6jim.com"] [uri "/private/.env"] [unique_id "acpIBImOOgXheXZctdoHqQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 06:15:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 02:15:26.682737 2026] [security2:error] [pid 24983:tid 24983] [client 172.70.134.2:11265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photonmatrix.rotarymagnetics.com"] [uri "/.env.json"] [unique_id "acoU_rjZj701RK-_Yh8acAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 05:23:11
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 01:23:05.577096 2026] [security2:error] [pid 14258:tid 14258] [client 172.70.134.2:13569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jordanliberman.com"] [uri "/.env.tmp"] [unique_id "acoIuceAj2yATFlu8XStWwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 04:18:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 00:18:40.042473 2026] [security2:error] [pid 14387:tid 14387] [client 172.70.134.2:10023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rwfrancis.com"] [uri "/.env.old"] [unique_id "acn5oLsqlhcA9CU_V-HZZwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
