🇧🇪
madeit
2026-09-04 13:05:01
UTC ·
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 23:44:59
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:44:52.689268 2026] [security2:error] [pid 9011:tid 9011] [client 172.70.35.55:9903] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:44:52.689268 2026] [security2:error] [pid 9011:tid 9011] [client 172.70.35.55:9903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.studioarmanni.com"] [uri "/.git/config"] [unique_id "aoOc9ACKBVKOcdxNfoe52wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 15:47:02
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 11:46:58.258490 2026] [security2:error] [pid 19260:tid 19260] [client 172.70.35.55:13080] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 11:46:58.258490 2026] [security2:error] [pid 19260:tid 19260] [client 172.70.35.55:13080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.darnorb.com"] [uri "/.git/config"] [unique_id "aoMs8jnKA1xilnl0ygpuzgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-14 00:34:49
UTC ·
(2 months ago)
[FriAug1402:34:45.1437382026][security2:error][pid1200906:tid1200932][client172.70.35.55:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[FriAug1402:34:45.1437382026][security2:error][pid1200906:tid1200932][client172.70.35.55:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"aaaa6877.org\"][uri\"/.git/config\"][unique_id\"an5ipfJp0ALoPRZP507nHQAAABc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇧🇪
madeit
2026-08-08 03:52:26
UTC ·
(3 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 09:50:24
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 05:50:15.211163 2026] [security2:error] [pid 12304:tid 12304] [client 172.70.35.55:12269] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 05:50:15.211163 2026] [security2:error] [pid 12304:tid 12304] [client 172.70.35.55:12269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schwanpaint.com"] [uri "/.env"] [unique_id "agbsV8GgA24UNCfq5o4FbQAAAAE"], referer: https://www.google.com/search?q=schwanpaint.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 02:51:39
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 22:51:33.255991 2026] [security2:error] [pid 9145:tid 9145] [client 172.70.35.55:9233] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 22:51:33.255991 2026] [security2:error] [pid 9145:tid 9145] [client 172.70.35.55:9233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.terrageosynthetics.com"] [uri "/prisma/.env"] [unique_id "agaKNfnZFRJuf2jau13kZgAAABo"], referer: https://www.google.com/search?q=webmail.terrageosynthetics.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 04:30:59
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 00:30:54.848182 2026] [security2:error] [pid 21273:tid 21273] [client 172.70.35.55:10793] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 00:30:54.848182 2026] [security2:error] [pid 21273:tid 21273] [client 172.70.35.55:10793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kingmansvc.com"] [uri "/config/.env.local"] [unique_id "acyffrR-U3nzZylZoax_zAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 05:12:44
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 01:12:39.799446 2026] [security2:error] [pid 15782:tid 15782] [client 172.70.35.55:9994] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 01:12:39.799446 2026] [security2:error] [pid 15782:tid 15782] [client 172.70.35.55:9994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.braintechsoftwaresolutions.com"] [uri "/.env.docker"] [unique_id "actXxwbOtiMWZ9cEe-KrpAAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 03:47:42
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 23:47:38.771826 2026] [security2:error] [pid 900:tid 900] [client 172.70.35.55:12023] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 23:47:38.771826 2026] [security2:error] [pid 900:tid 900] [client 172.70.35.55:12023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dev.jeanniemorrislaw.com"] [uri "/.env"] [unique_id "actD2pY904JDf4S9uP6B2wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 01:22:22
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:22:18.231419 2026] [security2:error] [pid 18339:tid 18339] [client 172.70.35.55:14272] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:22:18.231419 2026] [security2:error] [pid 18339:tid 18339] [client 172.70.35.55:14272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.the-burkes.us"] [uri "/docker/.env.local"] [unique_id "acshyhGNBhStGPqA60JH5AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 16:23:18
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 12:23:11.863736 2026] [security2:error] [pid 11310:tid 11310] [client 172.70.35.55:13845] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 12:23:11.863736 2026] [security2:error] [pid 11310:tid 11310] [client 172.70.35.55:13845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.hrmroofing.com"] [uri "/.env.save"] [unique_id "acqjb4CuTbPwOInbAhGTvQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 15:00:04
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 10:59:56.740015 2026] [security2:error] [pid 3079:tid 3079] [client 172.70.35.55:10082] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 10:59:56.740015 2026] [security2:error] [pid 3079:tid 3079] [client 172.70.35.55:10082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hennessymillworks.com"] [uri "/.git/refs/heads/main"] [unique_id "acqP7FI-WOUnVk-pLJcoFAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:21:07
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:21:01.523600 2026] [security2:error] [pid 12617:tid 12617] [client 172.70.35.55:13428] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:21:01.523600 2026] [security2:error] [pid 12617:tid 12617] [client 172.70.35.55:13428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thewanderinghermit.hal.dance"] [uri "/.env.production.local"] [unique_id "acp4vVMiqaIXk6StOrP8rAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 12:33:53
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:33:46.969203 2026] [security2:error] [pid 20380:tid 20380] [client 172.70.35.55:10460] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:33:46.969203 2026] [security2:error] [pid 20380:tid 20380] [client 172.70.35.55:10460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.blosoms.org"] [uri "/.env"] [unique_id "acptqj7b331D_WSpCAF84AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack