🇺🇸
TPI-Abuse
2026-08-16 03:04:02
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 23:03:54.831220 2026] [security2:error] [pid 27722:tid 27722] [client 172.70.42.64:12613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.trlservice.com"] [uri "/.git/HEAD"] [unique_id "aoEomly5y_p9CHW3JGpYNQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-11 21:59:31
(4 weeks ago)
Auto-ban: >3000 req/min op 2026-08-11
Web App Attack
SSH
Hacking
🇧🇪
madeit
2026-08-07 18:58:35
(1 month ago)
Web App Attack
🇩🇪
Séfora Srl
2026-06-17 08:03:44
(2 months ago)
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ...
show more
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-02 19:07:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 15:07:24.022384 2026] [security2:error] [pid 18052:tid 18052] [client 172.70.42.64:12258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.shaunthomas.com"] [uri "/.env.production.local"] [unique_id "ac6-bEhe3IrfiK0zJzVzJwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 05:57:30
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 01:57:25.143953 2026] [security2:error] [pid 25155:tid 25245] [client 172.70.42.64:13562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.darkestmoonart.com"] [uri "/.env.example"] [unique_id "ac4FReMBIbwoqklWmMknEQAAAc8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 04:57:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 00:57:50.891337 2026] [security2:error] [pid 30084:tid 30084] [client 172.70.42.64:9327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.badconsultingllc.com"] [uri "/.env2"] [unique_id "ac33TkGNIN85vSWmugmHigAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 05:27:09
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 01:27:02.994369 2026] [security2:error] [pid 26428:tid 26428] [client 172.70.42.64:13765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hardcountryrock.com"] [uri "/srv/.env"] [unique_id "acyspkuSplakgOYEDws5HgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 00:31:57
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 20:31:44.137914 2026] [security2:error] [pid 29706:tid 29706] [client 172.70.42.64:9510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "imaginationbyme.com.swhinc.net"] [uri "/public/.env"] [unique_id "acxncGz9SjTFoPLDeOMHpwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 15:20:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 11:20:25.082494 2026] [security2:error] [pid 6234:tid 6234] [client 172.70.42.64:10252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jefflowenstein.thelowensteinfamily.com"] [uri "/config/.env"] [unique_id "acvmOXdHgqAt3ILewnS3_AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 11:03:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 07:03:42.611956 2026] [security2:error] [pid 30481:tid 30481] [client 172.70.42.64:13927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.johnatuttle.us"] [uri "/.env.old"] [unique_id "acuqDguTfmw9ezG4bbCFKQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 09:29:23
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 05:29:19.271185 2026] [security2:error] [pid 21568:tid 21568] [client 172.70.42.64:11693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.skotam.com"] [uri "/.env.old"] [unique_id "acuT732Zz-SIIkZyvTqEswAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 07:32:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 03:32:03.318333 2026] [security2:error] [pid 2768:tid 2768] [client 172.70.42.64:12398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wiknwax.com"] [uri "/.env.tmp"] [unique_id "act4c3gmTeBMEdzfS7JXYAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 07:03:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 03:02:59.378799 2026] [security2:error] [pid 23206:tid 23206] [client 172.70.42.64:9943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.koolcoastalnights.com"] [uri "/.env.production.local"] [unique_id "actxoyZO1YGtTQIzTm5nTQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 04:01:55
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.42.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 00:01:29.041425 2026] [security2:error] [pid 30950:tid 30950] [client 172.70.42.64:14075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.techsunlimited.net"] [uri "/.env.docker"] [unique_id "actHGX-N0qqUmM-C9z8GAQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
