🇧🇪
madeit
2026-10-27 22:02:24
(19 hours ago)
Web App Attack
🇧🇪
madeit
2026-09-06 02:55:21
(1 month ago)
Web App Attack
🇺🇸
chrisj
2026-08-18 19:41:41
(2 months ago)
[Tue Aug 18 19:41:30.226275 2026] [proxy_fcgi:error] [pid 1182781:tid 1182794] [remote 172.70.174.196:9663] AH01071: Got error 'Primary script unknown'
[Tue Aug 18 19:41:39.910828 2026] [proxy_fcgi:error] [pid 1182781:tid 1182796] [remote 172.70.174. ...
show more
[Tue Aug 18 19:41:30.226275 2026] [proxy_fcgi:error] [pid 1182781:tid 1182794] [remote 172.70.174.196:9663] AH01071: Got error 'Primary script unknown'
[Tue Aug 18 19:41:39.910828 2026] [proxy_fcgi:error] [pid 1182781:tid 1182796] [remote 172.70.174.196:12910] AH01071: Got error 'Primary script unknown'
[Tue Aug 18 19:41:40.759851 2026] [proxy_fcgi:error] [pid 1182781:tid 1182795] [remote 172.70.174.196:12910] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇧🇪
madeit
2026-08-18 08:43:23
(2 months ago)
Web App Attack
🇧🇪
madeit
2026-08-08 09:13:10
(2 months ago)
Web App Attack
🇺🇸
mawan
2026-07-07 09:12:12
(3 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
2026-05-19 12:36:27
(5 months ago)
[Tue May 19 14:36:26.491131 2026] [authz_core:error] [pid 9010] [client 172.70.174.196:10591] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue May 19 14:36:26.600010 2026] [authz_core:error] [pid 9010] [client 172.70.174.196:105 ...
show more
[Tue May 19 14:36:26.491131 2026] [authz_core:error] [pid 9010] [client 172.70.174.196:10591] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue May 19 14:36:26.600010 2026] [authz_core:error] [pid 9010] [client 172.70.174.196:10591] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue May 19 14:36:26.724654 2026] [authz_core:error] [pid 9010] [client 172.70.174.196:10591] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 15:03:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 11:03:29.746207 2026] [security2:error] [pid 117781:tid 117781] [client 172.70.174.196:1359 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 11:03:29.746207 2026] [security2:error] [pid 117781:tid 117781] [client 172.70.174.196:13599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kdgsf.xyz"] [uri "/.env.staging"] [unique_id "adPLQeRMyFhyFxqQZe9WnQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 15:07:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 11:07:51.274898 2026] [security2:error] [pid 28794:tid 28794] [client 172.70.174.196:11914] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 11:07:51.274898 2026] [security2:error] [pid 28794:tid 28794] [client 172.70.174.196:11914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.alissacaputo.com"] [uri "/.env"] [unique_id "adJ6x1M6dksCfLB_juFwpAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 22:14:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 18:14:21.232685 2026] [security2:error] [pid 18579:tid 18579] [client 172.70.174.196:12766] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 18:14:21.232685 2026] [security2:error] [pid 18579:tid 18579] [client 172.70.174.196:12766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.camillascause.org"] [uri "/.env.dev"] [unique_id "adGNPRnDjLhAJ886ubZNXwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 08:35:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 04:35:36.163949 2026] [security2:error] [pid 10473:tid 10473] [client 172.70.174.196:9520] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 04:35:36.163949 2026] [security2:error] [pid 10473:tid 10473] [client 172.70.174.196:9520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fasllc.co"] [uri "/var/www/.env"] [unique_id "adDNWAP4ZLU-E4EpFFQCuQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 08:11:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 04:11:22.084649 2026] [security2:error] [pid 29067:tid 29067] [client 172.70.174.196:12400] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 04:11:22.084649 2026] [security2:error] [pid 29067:tid 29067] [client 172.70.174.196:12400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.km-herbs.com"] [uri "/.env.staging"] [unique_id "adDHqvuBmZFwdkztjaPBQAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 05:58:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:58:24.739891 2026] [security2:error] [pid 21373:tid 21373] [client 172.70.174.196:13614] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:58:24.739891 2026] [security2:error] [pid 21373:tid 21373] [client 172.70.174.196:13614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timeless.acupressbooks.com"] [uri "/.env.dev"] [unique_id "adCogBD0t584TVMlnYaNSQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 02:58:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 22:58:26.973884 2026] [security2:error] [pid 24187:tid 24187] [client 172.70.174.196:11911] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 22:58:26.973884 2026] [security2:error] [pid 24187:tid 24187] [client 172.70.174.196:11911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.communityofthecosmos.org"] [uri "/.env.production"] [unique_id "adB-UmDZ8v6z9cyoLl0onQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 13:25:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 09:25:17.043038 2026] [security2:error] [pid 11078:tid 11078] [client 172.70.174.196:13275] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 09:25:17.043038 2026] [security2:error] [pid 11078:tid 11078] [client 172.70.174.196:13275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.canonarizona.com"] [uri "/.env.json"] [unique_id "ac-_vbxw78yuD7bTdFZ86wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
