2026-05-04 13:47:14
(2 months ago)
172.70.42.237 - - [04/May/2026:15:47:13 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 ...
show more
172.70.42.237 - - [04/May/2026:15:47:13 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.70.42.237 - - [04/May/2026:15:47:13 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.70.42.237 - - [04/May/2026:15:47:13 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.70.42.237 - - [04/May/2026:15:47:13 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.70.42.237 - - [04/May/2026:15:47:13 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 45
...
show less
Brute-Force
Web App Attack
🇩🇪
abdubhai
2026-04-11 07:16:40
(3 months ago)
172.70.42.237 - - [11/Apr/2026:1
...
Brute-Force
🇩🇪
abdubhai
2026-04-07 12:42:38
(3 months ago)
172.70.42.237 - - [07/Apr/2026:1
...
Brute-Force
🇺🇸
TPI-Abuse
2026-04-02 05:45:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 01:45:43.504721 2026] [security2:error] [pid 22580:tid 22580] [client 172.70.42.237:9307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web15.dnchosting.com"] [uri "/.env.staging"] [unique_id "ac4Ch6FpLltGwKkF8xrigAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 20:22:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 16:22:23.665665 2026] [security2:error] [pid 14632:tid 14632] [client 172.70.42.237:14172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dukemason.com"] [uri "/.env.tmp"] [unique_id "ac1-f847wtEA0uuwcg18IQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 07:09:00
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 03:08:54.860914 2026] [security2:error] [pid 18176:tid 18176] [client 172.70.42.237:10893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.alccontractorsllc.com"] [uri "/.env.dist"] [unique_id "aczEhsoLS1a6B0mSz7LmDQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 02:48:15
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 22:48:03.067542 2026] [security2:error] [pid 21532:tid 21532] [client 172.70.42.237:11542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.clientes.mpservice.com.sv"] [uri "/.env.test"] [unique_id "acyHY9V8YIbJLjY4arZ5PQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 13:04:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 09:04:52.342880 2026] [security2:error] [pid 4664:tid 4685] [client 172.70.42.237:9946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.aglsolidwaste.com"] [uri "/admin/.env"] [unique_id "acvGdKFLP2IQ1qrcRcXAYAAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 10:17:48
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 06:17:28.708757 2026] [security2:error] [pid 10380:tid 10380] [client 172.70.42.237:14019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.senecaalumni.com"] [uri "/docker/.env.local"] [unique_id "acufOPg8daRHrAjPZxsFngAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 09:00:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 05:00:47.549697 2026] [security2:error] [pid 32208:tid 32208] [client 172.70.42.237:9515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.eworld-media.com"] [uri "/.env.production"] [unique_id "acuNPxqRlsIbdKLxqgdEnwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 08:24:11
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 04:24:03.093813 2026] [security2:error] [pid 14440:tid 14440] [client 172.70.42.237:12375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.renegadestudios.com"] [uri "/.env.orig"] [unique_id "acuEox41HG7iovf9aR33owAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 07:10:36
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 03:10:27.061355 2026] [security2:error] [pid 2046:tid 2046] [client 172.70.42.237:12751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robotsinme.rimaine.org"] [uri "/public/.env"] [unique_id "actzY6AiU74F8hz8tSgNwAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 06:23:48
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 02:23:42.938354 2026] [security2:error] [pid 12993:tid 12993] [client 172.70.42.237:13366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trebambini.jbaydeliveries.com"] [uri "/.env.example"] [unique_id "actobrUG2SBLW177p0xT3AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 05:52:23
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 01:52:15.644405 2026] [security2:error] [pid 3287:tid 3287] [client 172.70.42.237:11448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.forkliftserviceatl.com"] [uri "/.env.dev"] [unique_id "acthD5TtTV1M0OuIyC1cOQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 05:36:00
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 01:35:51.670174 2026] [security2:error] [pid 23741:tid 23741] [client 172.70.42.237:12164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tradenaples.directoryofbikes.com"] [uri "/.env.development"] [unique_id "actdN5zlGKIOjnvdbevKuwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack