🇺🇸
TPI-Abuse
2026-05-15 12:14:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 08:14:22.431777 2026] [security2:error] [pid 26501:tid 26501] [client 172.70.34.142:10355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.c470techarchive.bahamascruisersguide.com"] [uri "/.env.save"] [unique_id "agcOHs2SGbkGbgjQ-zh6XgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
masterguru
2026-05-15 07:36:11
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-166)
Bad Web Bot
2026-05-14 08:08:31
(1 month ago)
(caddyscan) Scanner path probe from 172.70.34.142 (US/United States/-): 5 in the last 3600 secs; Por ...
show more
(caddyscan) Scanner path probe from 172.70.34.142 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.70.34.142 - - [14/May/2026:07:52:42 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.34.142 - - [14/May/2026:08:03:44 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.34.142 - - [14/May/2026:08:04:26 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.34.142 - - [14/May/2026:08:04:54 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.34.142 - - [14/May/2026:08:08:28 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
🇺🇸
octageeks.com
2026-05-14 04:07:27
(1 month ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 11:20:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 07:20:07.274414 2026] [security2:error] [pid 12529:tid 12529] [client 172.70.34.142:9491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portfolio-realestate.com"] [uri "/.git/config"] [unique_id "af8YZ-1fYVFIBMhBbDwQQQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-04-07 07:05:49
(2 months ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 11:52:59
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 07:52:56.145343 2026] [security2:error] [pid 8157:tid 8157] [client 172.70.34.142:13360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.goatedlottosecrets.com"] [uri "/admin/.env"] [unique_id "adD7mOk28Y3D-3ETvrXmjgAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 18:43:04
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 14:42:57.847181 2026] [security2:error] [pid 20715:tid 20715] [client 172.70.34.142:9398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.markrikey.com"] [uri "/.env.dev"] [unique_id "adAKMcyKgtUjPKLdhgpWvAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 02:30:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 22:30:53.942632 2026] [security2:error] [pid 8604:tid 8604] [client 172.70.34.142:13207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.paragontechusa.com"] [uri "/.env.development.local"] [unique_id "ac8mXQEngUN8h1civ3KUmwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 07:41:53
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 03:41:47.515067 2026] [security2:error] [pid 23441:tid 23441] [client 172.70.34.142:11588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billiardlifetapleague.com"] [uri "/admin/.env"] [unique_id "act6u2ViEqQRe6BPAU6AOQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 04:02:44
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 00:02:41.480914 2026] [security2:error] [pid 21628:tid 21628] [client 172.70.34.142:12889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.volunteergems.com"] [uri "/.env.production"] [unique_id "actHYbU2VcfwKZMMGJhgvgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 03:34:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 23:34:16.963870 2026] [security2:error] [pid 13435:tid 13435] [client 172.70.34.142:10162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agapeaccounting.com.agapeaccountingllc.com"] [uri "/.env.staging"] [unique_id "actAuOwWpxz3OdJ-ghpX9QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 02:30:53
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 22:30:46.935653 2026] [security2:error] [pid 5104:tid 5122] [client 172.70.34.142:14042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ardentsi.com"] [uri "/.env.bak"] [unique_id "acsx1oEeg8zqpF3opRxIlAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 18:11:40
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 14:11:32.503523 2026] [security2:error] [pid 18548:tid 18548] [client 172.70.34.142:11754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.icbsmonitor.net"] [uri "/api/.env"] [unique_id "acq81Cx8IF5LxYyHZTRQkQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:46:57
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:46:49.542923 2026] [security2:error] [pid 13340:tid 13340] [client 172.70.34.142:10056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.handcraftedparquet.com"] [uri "/.envrc"] [unique_id "acq3CbMIog2h-d03ytbhxwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack