2026-10-25 22:54:27
(1 day ago)
(caddyscan) Scanner path probe from 104.22.100.175 (US/United States/-): 5 in the last 3600 secs; Po ...
show more
(caddyscan) Scanner path probe from 104.22.100.175 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 104.22.100.175 - - [25/Oct/2026:22:54:25 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 104.22.100.175 - - [25/Oct/2026:22:54:25 +0000] "GET /.aws/config HTTP/1.1"
[REDACTED] 200 2627 104.22.100.175 - - [25/Oct/2026:22:54:25 +0000] "GET /.env.keys HTTP/1.1"
[REDACTED] 200 2627 104.22.100.175 - - [25/Oct/2026:22:54:25 +0000] "GET /.env.credentials HTTP/1.1"
[REDACTED] 200 2627 104.22.100.175 - - [25/Oct/2026:22:54:25 +0000] "GET /.env.dev.local HTTP/1.1"
show less
Port Scan
🇧🇪
madeit
2026-10-19 10:20:19
(1 week ago)
Web App Attack
🇨🇿
Prcek
2026-10-14 20:50:58
(1 week ago)
PortScan:HOST=104.22.100.175,DPORTS=443
Port Scan
🇫🇷
dynamix
2026-10-11 00:36:49
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-09-27 22:16:26
(4 weeks ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇧🇪
madeit
2026-09-18 09:37:49
(1 month ago)
Web App Attack
🇻🇳
cimee
2026-09-12 21:03:23
(1 month ago)
This IP accessed the path /app/.env, which is banned.
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-12 11:19:44
(1 month ago)
Multiple WAF Violations
Web App Attack
🇻🇳
cimee
2026-08-23 15:35:19
(2 months ago)
This IP accessed the path /.env.local, which is banned.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 05:05:00
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.22.100.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.100.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 01:04:51.798633 2026] [security2:error] [pid 14897:tid 14897] [client 104.22.100.175:10819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capitalcitysoul.com.calvaryshreveport.org"] [uri "/.env"] [unique_id "aop_cyzty4xC3mq73YhqPQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 21:07:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.22.100.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.100.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 17:07:37.261812 2026] [security2:error] [pid 3119:tid 3119] [client 104.22.100.175:10911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.supaskills.gregorii.com"] [uri "/.env.development.local"] [unique_id "aooPmVzYXimX4WRYC-_zywAAABI"], referer: https://www.google.com/search?q=www.supaskills.gregorii.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇻🇳
cimee
2026-08-20 23:57:18
(2 months ago)
This IP accessed the path /.well-known/admin.php, which is banned.
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-17 22:00:37
(2 months ago)
Auto-ban: >3000 req/min op 2026-08-17
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-17 13:31:30
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.22.100.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.100.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 09:31:24.588131 2026] [security2:error] [pid 3951:tid 3951] [client 104.22.100.175:12832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ladymfashion.com"] [uri "/.git/HEAD"] [unique_id "aoMNLOOatNcYv318kwU4XgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 11:29:33
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.22.100.175 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.100.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:29:28.464652 2026] [security2:error] [pid 14901:tid 14901] [client 104.22.100.175:13341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.balivisaservice.com"] [uri "/.git/HEAD"] [unique_id "aoLwmHrmCRhMbkXfU8yUjQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
