🇧🇪
madeit
2026-10-24 01:18:41
(1 day ago)
Web App Attack
🇧🇪
madeit
2026-10-15 09:08:43
(1 week ago)
Web App Attack
🇧🇪
madeit
2026-09-20 12:49:19
(1 month ago)
Web App Attack
🇺🇸
CBJ
2026-08-23 09:21:45
(2 months ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 07:54:23
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 03:54:16.307055 2026] [security2:error] [pid 25349:tid 25349] [client 172.70.135.16:11086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.home.agingworkforcenews.com"] [uri "/.git/config"] [unique_id "aoFsqLGhkIKqgxKU_hTdBQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 01:02:50
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 21:02:45.867269 2026] [security2:error] [pid 13679:tid 13679] [client 172.70.135.16:11859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.butlerinc.net"] [uri "/.git/HEAD"] [unique_id "aoEMNcNAsqLw4EkqLiP99QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-10 20:43:29
(2 months ago)
Web App Attack
🇧🇷
chronos
2026-08-09 22:31:56
(2 months ago)
2026-08-09 19:19:04 UTC-3||Unauthorized connection attempt detected for port scanning
Port Scan
🇺🇸
mnsf
2026-04-01 07:06:37
(6 months ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 16:48:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 12:48:49.700313 2026] [security2:error] [pid 26992:tid 26992] [client 172.70.135.16:13617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wetlizarddiveteam.com"] [uri "/.env.save"] [unique_id "acqpcXiLBHDgbejf4YIf7wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 16:26:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 12:26:32.882012 2026] [security2:error] [pid 30544:tid 30544] [client 172.70.135.16:14130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.natursac.com"] [uri "/.env.dev.local"] [unique_id "acqkOFtletKq0YIyDWlCYAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 05:55:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 01:55:28.426193 2026] [security2:error] [pid 14513:tid 14513] [client 172.70.135.16:11433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.perlcreative.com"] [uri "/.env.production.bak"] [unique_id "acoQUGutY90ftnNcG9Rd-QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 03:54:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 23:54:13.339484 2026] [security2:error] [pid 32180:tid 32180] [client 172.70.135.16:13143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lspfest.com"] [uri "/.env.tmp"] [unique_id "acnz5UAL9Y6n5eJLoFwDMwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 02:39:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 22:39:07.798109 2026] [security2:error] [pid 2370:tid 2391] [client 172.70.135.16:11114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.j-and-t.net"] [uri "/.env"] [unique_id "acniS1Ze6mIdRpXEKHJQtgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 01:07:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 21:07:47.712311 2026] [security2:error] [pid 9855:tid 9916] [client 172.70.135.16:12375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rbarw.com"] [uri "/.env"] [unique_id "acnM4-Ty8shpRj_W1Yz8ZQAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
