2026-10-02 14:20:52
UTC ·
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-28 11:21:30
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-08-12 09:29:01
UTC ·
(3 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 04:04:05
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:04:00.066450 2026] [security2:error] [pid 714230:tid 714230] [client 172.70.174.237:1203 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:04:00.066450 2026] [security2:error] [pid 714230:tid 714230] [client 172.70.174.237:12034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.yacher.com"] [uri "/.env.test"] [unique_id "adSCMBP8FOAY2e4insP36wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 13:10:29
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 09:10:12.990933 2026] [security2:error] [pid 14236:tid 14236] [client 172.70.174.237:10229] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 09:10:12.990933 2026] [security2:error] [pid 14236:tid 14236] [client 172.70.174.237:10229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.victorg.me"] [uri "/.env.development"] [unique_id "adOwtHfuxmQkv6733JT4jgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 13:53:05
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 09:52:57.278484 2026] [security2:error] [pid 18897:tid 18897] [client 172.70.174.237:11873] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 09:52:57.278484 2026] [security2:error] [pid 18897:tid 18897] [client 172.70.174.237:11873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "networklivemusic.com"] [uri "/.env.bak"] [unique_id "adJpOR1NX5lJJPDIn4BanQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 01:03:19
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 21:03:09.140910 2026] [security2:error] [pid 31946:tid 31946] [client 172.70.174.237:14153] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 21:03:09.140910 2026] [security2:error] [pid 31946:tid 31946] [client 172.70.174.237:14153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hardcountryrock.com"] [uri "/.env.json"] [unique_id "adG0zWpAup3dje0LhzGTzwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 20:48:28
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 16:48:21.879571 2026] [security2:error] [pid 17832:tid 17832] [client 172.70.174.237:10997] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 16:48:21.879571 2026] [security2:error] [pid 17832:tid 17832] [client 172.70.174.237:10997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.grexicon.com"] [uri "/private/.env"] [unique_id "adF5FdjVVc-iZKWrXXSbPwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 18:20:57
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 14:20:51.282668 2026] [security2:error] [pid 4475:tid 4475] [client 172.70.174.237:9832] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 14:20:51.282668 2026] [security2:error] [pid 4475:tid 4475] [client 172.70.174.237:9832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.groovedoctors.com"] [uri "/.env.prod"] [unique_id "adFWg6rZagS2G-iYOTgkrwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 15:15:04
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 11:14:50.735317 2026] [security2:error] [pid 29995:tid 29995] [client 172.70.174.237:11185] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 11:14:50.735317 2026] [security2:error] [pid 29995:tid 29995] [client 172.70.174.237:11185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.title13.itaxcenter.com"] [uri "/.env.bak"] [unique_id "adEq6s8LERFxkCveY2Ds3gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 13:26:53
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 09:26:46.320970 2026] [security2:error] [pid 4919:tid 4944] [client 172.70.174.237:14324] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 09:26:46.320970 2026] [security2:error] [pid 4919:tid 4944] [client 172.70.174.237:14324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ilovemyparrot.com"] [uri "/.env.local"] [unique_id "adERlupylwfP6BNECjlqWAAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 07:45:30
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:45:25.391285 2026] [security2:error] [pid 9225:tid 9225] [client 172.70.174.237:11599] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:45:25.391285 2026] [security2:error] [pid 9225:tid 9225] [client 172.70.174.237:11599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.starktigers75.sophcomp.com"] [uri "/.env.old"] [unique_id "adDBlVsN_4t_t9k492BPugAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 04:28:07
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 00:28:00.341462 2026] [security2:error] [pid 21082:tid 21082] [client 172.70.174.237:9567] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 00:28:00.341462 2026] [security2:error] [pid 21082:tid 21082] [client 172.70.174.237:9567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.walterceron.com"] [uri "/.env.bak"] [unique_id "adCTUK5MB5cBlbp7EuAtTAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 03:28:36
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 23:28:20.257331 2026] [security2:error] [pid 28494:tid 28494] [client 172.70.174.237:11263] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 23:28:20.257331 2026] [security2:error] [pid 28494:tid 28494] [client 172.70.174.237:11263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gallery.pcoecsi.com"] [uri "/.env.development.local"] [unique_id "adCFVCrBKY3ChuxOQxMcOgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 12:42:08
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 08:42:00.285833 2026] [security2:error] [pid 5977:tid 5977] [client 172.70.174.237:14012] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.174.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 08:42:00.285833 2026] [security2:error] [pid 5977:tid 5977] [client 172.70.174.237:14012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.uraniumjewelry.com"] [uri "/.env_secret"] [unique_id "ac-1mK1Cflv4HNNP7KF9bwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
