🇧🇬
Stoyko Stoykov
2026-09-04 14:40:42
(2 days ago)
172.70.230.3 - - [04/Sep/2026:17:40:41 +0300] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0" ...
show more
172.70.230.3 - - [04/Sep/2026:17:40:41 +0300] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0"
...
show less
Hacking
Web App Attack
🇧🇪
madeit
2026-08-19 09:39:01
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-08-06 04:12:29
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 04:25:08
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:25:04.079243 2026] [security2:error] [pid 783493:tid 783493] [client 172.70.230.3:13785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richardlyne.com"] [uri "/web/.env"] [unique_id "adSHIFOX60yGuDSUaLlABQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 02:17:11
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 22:17:07.278687 2026] [security2:error] [pid 25778:tid 25778] [client 172.70.230.3:13525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbackbikinis.puckerbikini.com"] [uri "/.env.json"] [unique_id "adB0o-eroxp_CzoPwRf67gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 03:42:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 23:42:31.028920 2026] [security2:error] [pid 27001:tid 27001] [client 172.70.230.3:10264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.40svocaltrio.com"] [uri "/.env.local"] [unique_id "acX8p2kQDnaJi7qGPeQlcQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 00:41:40
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 20:41:32.024003 2026] [security2:error] [pid 17458:tid 17480] [client 172.70.230.3:11834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.c22p.org"] [uri "/public/.env"] [unique_id "acXSPODL3zVvUK7GmwGrswAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 14:49:50
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 10:49:39.257724 2026] [security2:error] [pid 5206:tid 5206] [client 172.70.230.3:10114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.reimaginingchess.com"] [uri "/.env.save"] [unique_id "acVHgyh2bjqxsbzR5tIJhgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 03:48:43
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 23:48:40.077683 2026] [security2:error] [pid 5807:tid 5807] [client 172.70.230.3:11324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.schwanpaint.com"] [uri "/.env.test"] [unique_id "acSsmImDkXYHUSavR-7TIQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 03:22:48
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 23:22:36.917088 2026] [security2:error] [pid 23887:tid 23887] [client 172.70.230.3:10436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.love-n-promises.com"] [uri "/.env.staging"] [unique_id "acSmfIOQrAP-_heljKpPKAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 01:26:01
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 21:25:54.237794 2026] [security2:error] [pid 5436:tid 5436] [client 172.70.230.3:9242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sekizinci.com"] [uri "/.env.backup"] [unique_id "acSLInCM39zDUqUHsTB-dgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 00:05:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 20:05:44.752615 2026] [security2:error] [pid 28118:tid 28118] [client 172.70.230.3:13930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.gabbyspetnanny.com"] [uri "/.env.local"] [unique_id "acR4WJFQhydFkJjNrtwuxwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 17:37:46
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 13:37:42.474795 2026] [security2:error] [pid 18278:tid 18278] [client 172.70.230.3:13190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.doctorc.net"] [uri "/.env.production.local"] [unique_id "acQdZhnlFxQfFOv6t4Vn4wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 15:42:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 11:42:20.167021 2026] [security2:error] [pid 10354:tid 10354] [client 172.70.230.3:10501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.acmax.com"] [uri "/.env.production.local"] [unique_id "acQCXF4hvtCo4n7whkDSHAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 23:35:58
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 19:35:54.801082 2026] [security2:error] [pid 10695:tid 10695] [client 172.70.230.3:10751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lockdownclaim.com"] [uri "/.env.example"] [unique_id "acMf2oiR3zsREI3hZUcM5gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
