2026-06-13 16:29:37
(9 hours ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 23:48:55
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 19:48:51.393507 2026] [security2:error] [pid 814:tid 814] [client 172.70.80.153:12579] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.rwfrancis.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.rwfrancis.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aht3Y75eiP7uMfVnUmUQFwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 20:28:18
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 16:28:13.109518 2026] [security2:error] [pid 15946:tid 15946] [client 172.70.80.153:10923] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.tedharris.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.tedharris.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "afz13VJwZgYxUwfAOsoWhwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2026-04-19 09:14:11
(1 month ago)
172.70.80.153 - - [19/Apr/2026:1
...
Brute-Force
🇺🇸
TPI-Abuse
2026-04-08 23:04:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 19:04:15.861339 2026] [security2:error] [pid 2411294:tid 2411294] [client 172.70.80.153:11974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "erikageyama.com"] [uri "/.env.backup"] [unique_id "adbe75VzdkXp9IABqP-xCwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 21:26:18
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 17:26:12.796899 2026] [security2:error] [pid 2771228:tid 2771228] [client 172.70.80.153:14126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.parkgrant.com"] [uri "/.env.save"] [unique_id "adbH9Pefqq-9Vn7xFcm_pwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 15:31:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 11:31:13.810039 2026] [security2:error] [pid 2730571:tid 2730571] [client 172.70.80.153:14064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ktnwassociatesinc.com"] [uri "/.env.production"] [unique_id "adZ0waA14Wh6S7gPpj8TCQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 21:17:06
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 17:17:02.740880 2026] [security2:error] [pid 24625:tid 24658] [client 172.70.80.153:12295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasertagandgames.lasertagmetairie.com"] [uri "/.env.old"] [unique_id "adQizvJqIIG9BP6nM6CfoAAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 14:31:29
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 10:31:21.248192 2026] [security2:error] [pid 414961:tid 414961] [client 172.70.80.153:12932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ronmelbihess.waggonerfinancial.com"] [uri "/.env1"] [unique_id "adPDuaHQCmbAt-Mu5vqTqQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 21:28:02
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 17:27:58.831062 2026] [security2:error] [pid 26235:tid 26235] [client 172.70.80.153:13767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.baughman.org"] [uri "/.env.dev"] [unique_id "adLT3kPvFHDIAMPiV7UkiQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 19:14:57
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 15:14:50.944160 2026] [security2:error] [pid 13124:tid 13124] [client 172.70.80.153:11146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.menagri.com"] [uri "/srv/.env"] [unique_id "adK0qpt-7srQAVRKJlJ9PQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 09:48:13
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:48:07.520852 2026] [security2:error] [pid 3217:tid 3217] [client 172.70.80.153:10513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cocoscabanas.com"] [uri "/.env"] [unique_id "adIv10ygN8e10Aiwc1vU5wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 23:47:15
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 19:47:11.575889 2026] [security2:error] [pid 10911:tid 10936] [client 172.70.80.153:12119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biznow.brucejoell.com"] [uri "/.git/refs/heads/master"] [unique_id "adGi_41RDB1lAdfub5suoQAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 23:25:53
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 19:25:45.885505 2026] [security2:error] [pid 27660:tid 27660] [client 172.70.80.153:10079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.gransla.com"] [uri "/.env"] [unique_id "adGd-fJszTDdFJ5vMUB3cwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 19:35:45
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.80.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 15:35:36.591313 2026] [security2:error] [pid 15125:tid 15127] [client 172.70.80.153:13129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caarp.tusappsonline.com"] [uri "/.env.bak"] [unique_id "adFoCAvlC_F_4mCuV-KtjgAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack