Anonymous
2026-08-30 14:09:58
(3 hours ago)
[Sun Aug 30 16:09:57.115004 2026] [authz_core:error] [pid 8538] [client 172.70.50.67:11033] AH01630: ...
show more
[Sun Aug 30 16:09:57.115004 2026] [authz_core:error] [pid 8538] [client 172.70.50.67:11033] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Aug 30 16:09:57.469277 2026] [authz_core:error] [pid 8538] [client 172.70.50.67:11033] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Aug 30 16:09:57.950724 2026] [authz_core:error] [pid 8538] [client 172.70.50.67:11033] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-08-29 11:35:58
(1 day ago)
[Sat Aug 29 13:35:57.188302 2026] [authz_core:error] [pid 14161] [client 172.70.50.67:11680] AH01630 ...
show more
[Sat Aug 29 13:35:57.188302 2026] [authz_core:error] [pid 14161] [client 172.70.50.67:11680] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Aug 29 13:35:57.432866 2026] [authz_core:error] [pid 14161] [client 172.70.50.67:11680] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Aug 29 13:35:57.593448 2026] [authz_core:error] [pid 14161] [client 172.70.50.67:11680] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
π§πͺ
madeit
2026-08-27 19:32:42
(2 days ago)
Web App Attack
π§πͺ
madeit
2026-08-17 23:06:36
(1 week ago)
Web App Attack
πΊπΈ
mawan
2026-07-12 09:16:20
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
π§πΎ
lns.bz
2026-04-14 23:27:47
(4 months ago)
Too many 404 requests [BY]
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 02:16:20
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 22:16:13.592138 2026] [security2:error] [pid 2695127:tid 2695127] [client 172.70.50.67:13751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tcomputerguy.com"] [uri "/.env.staging"] [unique_id "adW6bacUnlBP8kZoTm5FsgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-07 06:30:34
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 02:30:24.613003 2026] [security2:error] [pid 1072843:tid 1072843] [client 172.70.50.67:13475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.sneedvillefarmersmarket.com"] [uri "/.env.staging"] [unique_id "adSkgI2PQ36x_KmD06YNTgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-06 23:28:49
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 19:28:42.017449 2026] [security2:error] [pid 894030:tid 894030] [client 172.70.50.67:9835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.donnysimonton.com"] [uri "/.env.staging"] [unique_id "adRBqpi600z-PR3GZYAwDwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-06 15:13:04
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 11:12:58.418891 2026] [security2:error] [pid 192142:tid 192142] [client 172.70.50.67:9538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vitess.com"] [uri "/.env.local"] [unique_id "adPNeqMlJ_Ir84TF3RuqsQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-06 08:37:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 04:37:42.366696 2026] [security2:error] [pid 11143:tid 11143] [client 172.70.50.67:13635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.megaandina.com"] [uri "/server/.env"] [unique_id "adNw1kqrtlEtU3RZoOg3XwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-06 01:46:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:46:19.504885 2026] [security2:error] [pid 24447:tid 24447] [client 172.70.50.67:12066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.amurtel.org"] [uri "/.env.local"] [unique_id "adMQa9RpPLhntOVNX81JQAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-05 20:22:24
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 16:22:21.045183 2026] [security2:error] [pid 3462:tid 3462] [client 172.70.50.67:13353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.crossfiregold.com"] [uri "/.env.save"] [unique_id "adLEfUpHHxGFyt4ytuiAcgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-05 14:07:33
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.50.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 10:07:23.370882 2026] [security2:error] [pid 29875:tid 29875] [client 172.70.50.67:14218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.todosconlaura.com"] [uri "/.env.production.local"] [unique_id "adJsmyCSihiiZuRI62TnLwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§πΎ
lns.bz
2026-04-05 13:48:45
(4 months ago)
Too many 404 requests [BY]
Web App Attack