🇺🇸
TPI-Abuse
2026-05-09 11:01:48
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 07:01:44.629599 2026] [security2:error] [pid 1791:tid 1791] [client 172.70.34.2:13691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ecomim.com"] [uri "/.git/config"] [unique_id "af8UGA0lJD9UFuRgf8MaRQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-04 22:10:09
(1 month ago)
Web App Attack
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-04-05 03:05:22
(2 months ago)
Scanning/Probing (17)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-04-03 21:05:16
(2 months ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 10:41:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 06:40:57.197223 2026] [security2:error] [pid 16296:tid 16296] [client 172.70.34.2:13435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.riverflow.com"] [uri "/.env.backup"] [unique_id "ac5HueLXgy6EOqxYYXBOgwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 08:17:04
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 04:16:58.862291 2026] [security2:error] [pid 3330:tid 3330] [client 172.70.34.2:11668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.badwaterclaims.com"] [uri "/.env.test"] [unique_id "aczUeqTntyesdwkCdpKEggAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 01:09:46
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:09:38.646413 2026] [security2:error] [pid 15561:tid 15611] [client 172.70.34.2:10974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ayubhamdardfoundation.org"] [uri "/.env.local"] [unique_id "acse0t2x3PMb1OZZquWtrgAAAYo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 18:44:45
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 14:44:38.152390 2026] [security2:error] [pid 24835:tid 24835] [client 172.70.34.2:10686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idledog.com"] [uri "/.env.production"] [unique_id "acrElvdInZoDmo6f2MPFHgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:09:19
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:09:11.534943 2026] [security2:error] [pid 18045:tid 18045] [client 172.70.34.2:12532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thegrabbagshow.com"] [uri "/.env.orig"] [unique_id "acquN9xFyUe6581Jpfq51AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:44:19
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:44:15.483508 2026] [security2:error] [pid 24510:tid 24510] [client 172.70.34.2:11058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tgdingenieria.com"] [uri "/.env.save"] [unique_id "acpiD8krHudV2DlwhbpvMwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:08:16
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:08:12.179779 2026] [security2:error] [pid 11920:tid 11920] [client 172.70.34.2:12313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.the-board-shop.com"] [uri "/.env.production"] [unique_id "acpZnFt-1x3zGmYFOJfwnAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 10:33:17
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 06:33:13.640581 2026] [security2:error] [pid 23617:tid 23617] [client 172.70.34.2:12597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.midnight-tech.com"] [uri "/.env.production"] [unique_id "acpRaROLGdoDU-jaAzefmgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 09:30:38
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 05:30:33.881550 2026] [security2:error] [pid 3733:tid 3733] [client 172.70.34.2:11987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.agelessoutcomes.com"] [uri "/.env.development"] [unique_id "acpCubnqRXXAEkxcT8xPigAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 07:56:27
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 03:56:23.777761 2026] [security2:error] [pid 2705:tid 2705] [client 172.70.34.2:13726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.billiardlifetapleague.com"] [uri "/.env.php"] [unique_id "acosp6juKn_d7cpJ6JktAAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 05:08:17
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.34.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 01:08:11.524697 2026] [security2:error] [pid 5849:tid 5849] [client 172.70.34.2:12202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.xmlprotocol.com"] [uri "/.env.production.local"] [unique_id "acoFO4lGZ6QZOa6gDg_igQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack