🇺🇸
TPI-Abuse
2026-10-08 04:25:13
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 00:25:07.821694 2026] [security2:error] [pid 29898:tid 29898] [client 172.70.231.66:9922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hatsizes.com"] [uri "/.htaccess"] [unique_id "ascbI_G7OldpG6eV8GL_GgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 18:43:50
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 14:43:44.524281 2026] [security2:error] [pid 8040:tid 8040] [client 172.70.231.66:10948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "longacre.biz"] [uri "/.svn/entries"] [unique_id "asaS4Mf9IPeVI6mDqY41bgAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-01 20:22:49
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-06 04:06:03
(2 months ago)
Web App Attack
🇦🇺
oncord
2026-06-07 08:59:10
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-06-03 12:41:23
(4 months ago)
Form spam
Web Spam
🇳🇱
COMPLEX
2026-05-29 00:08:38
(4 months ago)
Unsolicited TCP traffic | Action: DROP | Port 443
Phishing
🇺🇸
TPI-Abuse
2026-04-08 00:29:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 20:29:24.716142 2026] [security2:error] [pid 1293576:tid 1293576] [client 172.70.231.66:13438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bikiniwatersports.com"] [uri "/.env.backup"] [unique_id "adWhZBlfJTfcuY5RD_T-1AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 09:20:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 05:20:02.710990 2026] [security2:error] [pid 6443:tid 6443] [client 172.70.231.66:13688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sabbathseminars.net"] [uri "/.env.staging"] [unique_id "ac-GQuVsN_BD-pJGAnZMvAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 23:51:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 19:51:54.903611 2026] [security2:error] [pid 7592:tid 7592] [client 172.70.231.66:11990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caleb.calebdavison.com"] [uri "/.git/refs/heads/main"] [unique_id "acXGmm_-49SG78xAo46JtwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 14:50:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 10:50:20.259030 2026] [security2:error] [pid 3420:tid 3420] [client 172.70.231.66:10435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mthompson-business-services.com"] [uri "/.env2"] [unique_id "acVHrKRy_pe4Ql77-nBfkQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 07:14:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 03:14:34.536969 2026] [security2:error] [pid 7022:tid 7022] [client 172.70.231.66:12165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.goalsnet.net"] [uri "/var/www/html/.env"] [unique_id "acTc2o4yGUgskezQE4kSxQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 06:11:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 02:11:50.294753 2026] [security2:error] [pid 2556:tid 2620] [client 172.70.231.66:13745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.eliteproductions.tv"] [uri "/.env.json"] [unique_id "acTOJvIc2TirfG1NUwrRJgAAAYw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 02:07:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 22:07:52.163712 2026] [security2:error] [pid 31435:tid 31435] [client 172.70.231.66:13886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.estate36.yankeetownfishing.com"] [uri "/.env.staging"] [unique_id "acSU-Kg_IWtvSgx4oRCFxwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 00:27:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 20:27:03.408640 2026] [security2:error] [pid 13564:tid 13564] [client 172.70.231.66:10448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cityoffoley.gov"] [uri "/.env.dist"] [unique_id "acR9V36aC-IhMrhyYywZNAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
