🇧🇪
madeit
2026-10-08 11:12:28
(1 week ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 02:53:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 22:53:11.741611 2026] [security2:error] [pid 23549:tid 23549] [client 172.70.230.27:11858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbrtome.cl"] [uri "/wp-config.php.save"] [unique_id "asMRF3ubCt_wwhYn3iU50AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-20 22:23:52
(3 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-09 12:25:11
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-26 18:16:39
(1 month ago)
Web App Attack
2026-04-23 05:49:31
(5 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 06:15:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 02:15:02.997786 2026] [security2:error] [pid 1719:tid 1719] [client 172.70.230.27:10747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kwcccarshow.com"] [uri "/.env.staging"] [unique_id "adNPZgmeCf6hNpBfMzA-bgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 12:53:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 08:53:10.785520 2026] [security2:error] [pid 27091:tid 27091] [client 172.70.230.27:9890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.microbooty.com"] [uri "/srv/.env"] [unique_id "ac5mtsFrsD1rCZYoZVHiBgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 18:19:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 14:19:13.306028 2026] [security2:error] [pid 30349:tid 30349] [client 172.70.230.27:13079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.concoursegallery.com"] [uri "/.env.save"] [unique_id "acbKId3llu5M8rFR16J34AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 03:11:01
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 23:10:55.261870 2026] [security2:error] [pid 27388:tid 27388] [client 172.70.230.27:12548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.angelsofrhodeisland.com"] [uri "/.env.production.local"] [unique_id "acX1P-mW3V3-QZ9JiCF89wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 20:18:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 16:18:28.917002 2026] [security2:error] [pid 16169:tid 16169] [client 172.70.230.27:12404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jpastorphotographics.com"] [uri "/.env.local"] [unique_id "acWUlC7bzE2DkhxK5uhwyAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 18:24:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 14:23:58.392168 2026] [security2:error] [pid 18759:tid 18759] [client 172.70.230.27:13302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.edelbaumarchitect.com"] [uri "/.env.old"] [unique_id "acV5vsJhDtTtJ3vgbnzJpwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 15:41:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 11:41:16.695399 2026] [security2:error] [pid 11853:tid 11853] [client 172.70.230.27:11116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.twangcaster.com"] [uri "/.env.development"] [unique_id "acVTnESoRU72rBRdHNjSIgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 14:10:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 10:10:28.729636 2026] [security2:error] [pid 1753:tid 1753] [client 172.70.230.27:12158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.nolenelam.com"] [uri "/.env.dev"] [unique_id "acU-VPyl9GbEzCznQNvSFwAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 11:24:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 07:24:24.544997 2026] [security2:error] [pid 2279:tid 2279] [client 172.70.230.27:13075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bjennehall.com"] [uri "/.env.bak"] [unique_id "acUXaLWZ71PpbSIfLvSLBgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
