🇫🇷
dynamix
2026-10-11 01:31:44
(4 days ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-30 10:37:51
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 07:23:33
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 03:23:27.991574 2026] [security2:error] [pid 29109:tid 29109] [client 172.70.175.164:9433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clowaterart.com"] [uri "/.git/config"] [unique_id "agAyb-pN6AUPQoKARnDTdwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 00:53:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 20:53:10.392610 2026] [security2:error] [pid 3856:tid 3909] [client 172.70.175.164:10592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.7sons.net"] [uri "/.env.dev"] [unique_id "adMD9hyhMWrYH3b-yVGF2QAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 19:43:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 15:43:00.993967 2026] [security2:error] [pid 6537:tid 6537] [client 172.70.175.164:12413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "letceteragifts.kathrynmcbride.com"] [uri "/.env.orig"] [unique_id "adFpxBMlmU4nUsb9vu6GOAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 14:55:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 10:54:55.096998 2026] [security2:error] [pid 20832:tid 20832] [client 172.70.175.164:10912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.serconpri.com"] [uri "/.envrc"] [unique_id "adEmP-CS3A3S_Z7o6wwzEgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 09:57:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 05:57:01.086083 2026] [security2:error] [pid 31791:tid 31791] [client 172.70.175.164:13306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theboates.com"] [uri "/.env.tmp"] [unique_id "adDgbXYPDwl8mkNBBl9gXQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 07:17:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:17:33.105277 2026] [security2:error] [pid 26239:tid 26239] [client 172.70.175.164:10230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.elcocotours.com"] [uri "/.env.development.local"] [unique_id "adC7DQuGYd12dTjXtkPfHwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 20:08:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 16:08:15.606399 2026] [security2:error] [pid 26771:tid 26771] [client 172.70.175.164:10823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bosch.pamplonaserviciotecnico.com"] [uri "/.env.development"] [unique_id "adAeL_W20ieVfD5PBOtTNgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 17:33:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 13:33:36.784309 2026] [security2:error] [pid 6877:tid 6877] [client 172.70.175.164:13757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web-sitebuilder.com.convoyforkids.com"] [uri "/.env1"] [unique_id "ac_58MCwP7u8YkIaWDHtUwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-04-03 08:07:04
(6 months ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 06:06:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 02:06:38.313003 2026] [security2:error] [pid 1796:tid 1796] [client 172.70.175.164:12779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.richardnash.com"] [uri "/api/.env"] [unique_id "ac9Y7kR5WwJ-5dzJ3jWfyQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 05:28:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 01:28:07.957771 2026] [security2:error] [pid 17933:tid 17933] [client 172.70.175.164:9579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sidkha.com"] [uri "/backend/.env"] [unique_id "ac9P565YQxdWGbFh7qEZ4gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 01:20:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 21:20:20.090924 2026] [security2:error] [pid 8644:tid 8644] [client 172.70.175.164:13555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rjdyckarchitect.com"] [uri "/.env.example"] [unique_id "ac8V1HseM59x1ha73-atzgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 13:49:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 09:48:58.966281 2026] [security2:error] [pid 25509:tid 25509] [client 172.70.175.164:11877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "singapore-airshow.christinepeat.com"] [uri "/.env.local"] [unique_id "ac0iSnlkasX1wGl0eb1McAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
