🇺🇸
almazick
2026-08-30 15:56:50
(6 days ago)
Fail2Ban jail window on srv1.windowrepair.us banned 172.70.114.8 after 1 attempts
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-20 11:33:49
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-08-10 23:19:30
(3 weeks ago)
Web App Attack
🇳🇴
jad-abuse
2026-07-04 02:36:25
(2 months ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
show less
Web App Attack
🇬🇧
pinguin
2026-06-05 06:58:13
(3 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /js/config.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-04-20 22:01:00
(4 months ago)
Auto-ban: >3000 req/min op 2026-04-20
Web App Attack
SSH
Hacking
🇺🇸
mawan
2026-04-13 22:22:06
(4 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
chrisj
2026-04-02 15:10:53
(5 months ago)
[Thu Apr 02 15:10:04.631962 2026] [proxy_fcgi:error] [pid 1867330:tid 1867330] [client 172.70.114.8: ...
show more
[Thu Apr 02 15:10:04.631962 2026] [proxy_fcgi:error] [pid 1867330:tid 1867330] [client 172.70.114.8:13737] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 15:10:52.233869 2026] [proxy_fcgi:error] [pid 1867378:tid 1867378] [client 172.70.114.8:11956] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 15:10:52.931309 2026] [proxy_fcgi:error] [pid 1867378:tid 1867378] [client 172.70.114.8:11956] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-03-30 14:52:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 10:52:50.907298 2026] [security2:error] [pid 7815:tid 7815] [client 172.70.114.8:12432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.scrunchiebutt.com"] [uri "/.env.php"] [unique_id "acqOQoJ1N330l7s2SUUNmgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 20:13:06
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 16:12:58.462023 2026] [security2:error] [pid 1316:tid 1316] [client 172.70.114.8:12362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.bostonscience.com"] [uri "/.env~"] [unique_id "acmHyvpJzJoxpe4TnsigyQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 09:16:11
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:16:05.369265 2026] [security2:error] [pid 31678:tid 31678] [client 172.70.114.8:11519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.stoveclockrepair.com"] [uri "/.env.development"] [unique_id "ab0QVXE-Zb8SWcXdOJdwQQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 09:00:10
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:00:02.028187 2026] [security2:error] [pid 9192:tid 9192] [client 172.70.114.8:10028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.michalovic.org"] [uri "/.env.local.backup"] [unique_id "ab0MksPiHb52zqAJJlxWzgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 05:32:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:32:31.342598 2026] [security2:error] [pid 2443:tid 2443] [client 172.70.114.8:11776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bb103.us"] [uri "/srv/.env"] [unique_id "abzb7-JmIgqrpBMzIDCOUgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:53:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:53:14.127589 2026] [security2:error] [pid 4220:tid 4220] [client 172.70.114.8:12805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.molder.com.hk"] [uri "/.env.prod"] [unique_id "abzEqufxpaSb8-NVLTxd-AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 03:18:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.114.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 23:18:46.257793 2026] [security2:error] [pid 14108:tid 14108] [client 172.70.114.8:12858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jabbosjingles.danged.com"] [uri "/private/.env"] [unique_id "aby8luETHzcT8j5HALOVGwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
