Anonymous
2026-11-08 21:02:59
UTC ·
(1 day ago)
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /.env-example HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /.claude/settings.json HTTP/1.1" 403 124 "-" ...
show more
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /.env-example HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /.claude/settings.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /.docker/config.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /.amplifyrc HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.69.222.230 - - [08/Nov/2026:23:02:58 +0200] "GET /
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 15:45:51
UTC ·
(4 days ago)
Blocked by firewall on hugin [8080/tcp] | Rule: UFW | SPT: 9640 | TTL: 57 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇹🇷
crnpekgoz
2026-10-24 14:34:11
UTC ·
(2 weeks ago)
Malicious HTTP GET request for '/.env.dev' (HTTP 301) from 172.69.222.230. Threat: Web Güvenlik Açığı Taraması (.env/bot). Blocked by WardenGuard Web Shield.
Web App Attack
🇫🇷
dynamix
2026-10-17 13:46:23
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-09 00:17:53
UTC ·
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 00:14:48
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:14:44.207750 2026] [security2:error] [pid 11574:tid 11574] [client 172.69.222.230:14180] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:14:44.207750 2026] [security2:error] [pid 11574:tid 11574] [client 172.69.222.230:14180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calogerolawfirm.com"] [uri "/.git/config"] [unique_id "arxUdL9AxgJLDVxDBUEbSQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-30 01:50:20
UTC ·
(2 months ago)
[SunAug3003:50:15.8594022026][security2:error][pid652870:tid652945][client172.69.222.230:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[SunAug3003:50:15.8594022026][security2:error][pid652870:tid652945][client172.69.222.230:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"rvengineering.ch\"][uri\"/.git/config\"][unique_id\"apOMV5W7xDLINGT2chiaHgAAAMs\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 10:30:29
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:30:21.374007 2026] [security2:error] [pid 19605:tid 19605] [client 172.69.222.230:12582] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:30:21.374007 2026] [security2:error] [pid 19605:tid 19605] [client 172.69.222.230:12582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.accordionfactory.com"] [uri "/.git/config"] [unique_id "apFjPdPnAI4dlsAyeNSuvgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-28 04:31:53
UTC ·
(2 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-08-26 20:30:24
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 16:30:18.618400 2026] [security2:error] [pid 6933:tid 6933] [client 172.69.222.230:14144] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 16:30:18.618400 2026] [security2:error] [pid 6933:tid 6933] [client 172.69.222.230:14144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.afscmelocal2794.com"] [uri "/.git/HEAD"] [unique_id "ao9M2iU4qAZmi8D59AwvzwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-08-26 10:57:37
UTC ·
(2 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸
TPI-Abuse
2026-08-25 16:55:33
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:55:26.576007 2026] [security2:error] [pid 7732:tid 7732] [client 172.69.222.230:11027] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:55:26.576007 2026] [security2:error] [pid 7732:tid 7732] [client 172.69.222.230:11027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.schlegelcreative.com"] [uri "/.git/HEAD"] [unique_id "ao3I_vZ1PxITjIG7pNKa9gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 05:17:42
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 01:17:38.507140 2026] [security2:error] [pid 21585:tid 21585] [client 172.69.222.230:13083] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 01:17:38.507140 2026] [security2:error] [pid 21585:tid 21585] [client 172.69.222.230:13083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.stoneybluff.com"] [uri "/.git/config"] [unique_id "aovT8p5ZP1P3giUVJ2R-lAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 03:18:13
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 23:18:07.372390 2026] [security2:error] [pid 9346:tid 9346] [client 172.69.222.230:13436] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 23:18:07.372390 2026] [security2:error] [pid 9346:tid 9346] [client 172.69.222.230:13436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flashbackvintageandthrift.georgetownca.com"] [uri "/.git/HEAD"] [unique_id "aou37x2u7xd5HMKkoRNt_QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 02:50:29
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 22:50:22.955374 2026] [security2:error] [pid 28754:tid 28754] [client 172.69.222.230:9248] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.222.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 22:50:22.955374 2026] [security2:error] [pid 28754:tid 28754] [client 172.69.222.230:9248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jesuspuzzle.com"] [uri "/.git/config"] [unique_id "aouxbkEJNcZPdMIFlivG8wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack