🇨🇿
Prcek
2026-06-20 16:58:17
(1 day ago)
PortScan:HOST=172.70.175.206,DPORTS=443
Port Scan
🇺🇸
TPI-Abuse
2026-04-06 23:10:49
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 19:10:44.545622 2026] [security2:error] [pid 688595:tid 688595] [client 172.70.175.206:11186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.xn--lyngr-yua.net"] [uri "/.env.production"] [unique_id "adQ9dGruhhomaVSEENMr7gAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 19:41:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 15:41:15.455436 2026] [security2:error] [pid 612795:tid 612819] [client 172.70.175.206:10809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.dermatologistcoloradosprings.com"] [uri "/.git/logs/HEAD"] [unique_id "adQMW9Mflk59XncXZQikbgAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 10:29:38
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 06:29:31.297645 2026] [security2:error] [pid 26976:tid 26976] [client 172.70.175.206:11630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edmontonareahomes.digitalracemedia.com"] [uri "/.env.development"] [unique_id "adOLC48_YzsItk7j4nK1gAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 02:29:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 22:29:39.674284 2026] [security2:error] [pid 14941:tid 14941] [client 172.70.175.206:11939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lifeplannutrition.com"] [uri "/.env.production"] [unique_id "adHJEwCrubB2GvRqB94wxgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-04 12:21:00
(2 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 07:16:34
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:16:27.061606 2026] [security2:error] [pid 23370:tid 23370] [client 172.70.175.206:14034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.elcocotours.com"] [uri "/.env.development"] [unique_id "adC6y3put69Q3GLc2gx_nAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 17:10:56
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 13:10:50.805155 2026] [security2:error] [pid 24508:tid 24508] [client 172.70.175.206:12594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lunarinfrastructure.com"] [uri "/.env.old"] [unique_id "ac_0msPFn2zqB4xZS5DyAwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 16:23:48
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 12:23:42.144490 2026] [security2:error] [pid 27202:tid 27202] [client 172.70.175.206:12601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.orcastrong.com"] [uri "/.env.save"] [unique_id "ac_pjryDwKqK5FQah_rBjQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 07:58:02
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 03:57:56.147359 2026] [security2:error] [pid 17294:tid 17294] [client 172.70.175.206:13384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.matchob.utilis.net"] [uri "/.env.local"] [unique_id "ac9zBBFbRWqjcjf5Njen3QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 06:06:06
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 02:06:01.011165 2026] [security2:error] [pid 31234:tid 31258] [client 172.70.175.206:14329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windowtailors.com"] [uri "/.env.backup"] [unique_id "ac9YyUzYoxi8foF6SA7jbAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 04:26:51
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 00:26:45.050322 2026] [security2:error] [pid 2227:tid 2227] [client 172.70.175.206:10347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.customhumanrobots.internetnameregistration.com"] [uri "/.env.container"] [unique_id "ac9BhTalFO9XHk6oLPomhAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 12:29:01
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 08:28:52.740920 2026] [security2:error] [pid 4112:tid 4112] [client 172.70.175.206:13367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "criarteste.com.creartest.com"] [uri "/.env.backup"] [unique_id "ac0PhPu9aSQBQKX98RnCtwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 10:03:53
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 06:03:48.244337 2026] [security2:error] [pid 5238:tid 5238] [client 172.70.175.206:10230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.supaskills.com"] [uri "/.env.test"] [unique_id "aczthGwS4jgvRV3ts2thbQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 09:46:14
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 05:45:54.254085 2026] [security2:error] [pid 25535:tid 25535] [client 172.70.175.206:10616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pleaseaddbacon.com"] [uri "/.env.json"] [unique_id "aczpUqM1A1--sBYze4xtFAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack