🇺🇸
TPI-Abuse
2026-08-17 10:38:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 06:38:29.376080 2026] [security2:error] [pid 28816:tid 28831] [client 172.70.134.81:10072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.briteh.com"] [uri "/.git/config"] [unique_id "aoLkpUZofQ02_o_M7P-UPAAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-12 11:13:17
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:49:52
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:49:23.803418 2026] [security2:error] [pid 13449:tid 13519] [client 172.70.134.81:9610] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pluralmatrix.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pluralmatrix.com"] [uri "/config/database.php.bak"] [unique_id "agbeE88UY_wJIYt1j1MoCgAAAkU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-03-31 08:07:01
(6 months ago)
Scanning/Probing (19)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:43:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:43:36.803188 2026] [security2:error] [pid 23667:tid 23667] [client 172.70.134.81:11985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.owldreamllc.com"] [uri "/.env2"] [unique_id "acq2SGcUPMzsPWDQENQ3dwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 16:37:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 12:37:19.898966 2026] [security2:error] [pid 29966:tid 29966] [client 172.70.134.81:12279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jeremy-olson.com"] [uri "/.env.development.local"] [unique_id "acqmvxk6Qo4I4ldr5XTrsgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:47:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:47:20.305394 2026] [security2:error] [pid 4793:tid 4793] [client 172.70.134.81:10576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.roadtosalvation.org"] [uri "/.env.bak"] [unique_id "acp-6DiCYLXER39WkNTZpQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:10:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:10:05.704187 2026] [security2:error] [pid 3981:tid 3981] [client 172.70.134.81:9404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "navarrete.ws"] [uri "/.env.example"] [unique_id "acp2LeB5-t6bL4s377sxmwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:07:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:07:34.495718 2026] [security2:error] [pid 13950:tid 13950] [client 172.70.134.81:12667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kircali.net"] [uri "/.env"] [unique_id "acpZdrxZpuqGZy5AFATMfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 08:36:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 04:36:37.219397 2026] [security2:error] [pid 27985:tid 27985] [client 172.70.134.81:14203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hal.dance"] [uri "/.env.old"] [unique_id "aco2FQD7Tgb_1JfshERpcgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 06:45:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 02:45:14.475327 2026] [security2:error] [pid 6256:tid 6256] [client 172.70.134.81:10236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anythingsoldworldwide.com"] [uri "/var/www/html/.env"] [unique_id "acob-p1u9zHMduZurHZzEgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 06:12:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 02:12:24.013354 2026] [security2:error] [pid 916:tid 916] [client 172.70.134.81:10818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.angelaknightmusic.com"] [uri "/private/.env"] [unique_id "acoUSO4IW-gv-Eww8Oc-DQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 05:54:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 01:54:12.443672 2026] [security2:error] [pid 14530:tid 14530] [client 172.70.134.81:10128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.perlcreative.com"] [uri "/.env.bak"] [unique_id "acoQBPY8YpNu2PHS6EKL2gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 04:22:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 00:22:07.976048 2026] [security2:error] [pid 1428:tid 1449] [client 172.70.134.81:11910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.familyvalenti.com"] [uri "/.env_backup"] [unique_id "acn6b0nKMnrB7yRt5Yc1JAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 03:24:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.134.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 23:23:56.004974 2026] [security2:error] [pid 4539:tid 4539] [client 172.70.134.81:10897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.klfreeman.com"] [uri "/admin/.env"] [unique_id "acnszJR9rAR_KGbVe2ki5QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
