🇧🇬
Stoyko Stoykov
2026-09-09 10:01:54
(19 hours ago)
172.70.135.199 - - [09/Sep/2026:13:01:53 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/2.0" 404 ...
show more
172.70.135.199 - - [09/Sep/2026:13:01:53 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/2.0" 404 1853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Hacking
Web App Attack
🇧🇪
madeit
2026-09-08 05:38:41
(2 days ago)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-04 21:59:27
(5 days ago)
Auto-ban: >3000 req/min op 2026-09-04
Web App Attack
SSH
Hacking
🇧🇬
Stoyko Stoykov
2026-08-26 17:43:29
(2 weeks ago)
172.70.135.199 - - [26/Aug/2026:20:43:28 +0300] "GET /w.php HTTP/1.1" 301 162 "-" "-"
...
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 08:24:59
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:24:52.365211 2026] [security2:error] [pid 27404:tid 27404] [client 172.70.135.199:13411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buenasfrecuencias.com"] [uri "/.git/config"] [unique_id "aoLFVGwbz1CBXajVpQJNOQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 05:40:07
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:39:56.723845 2026] [security2:error] [pid 18281:tid 18281] [client 172.70.135.199:11989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.hills-tax.com"] [uri "/.git/HEAD"] [unique_id "aoKerHC0kz1tCUD82nRgAwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 03:50:56
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 23:50:51.576981 2026] [security2:error] [pid 3393748:tid 3393803] [client 172.70.135.199:11837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.whitecrosslibrary.com"] [uri "/.git/config"] [unique_id "aoEzm4GnM_mzFbKWpMIUzgAAAZM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-14 09:07:05
(3 weeks ago)
Web App Attack
🇧🇪
madeit
2026-08-05 08:25:26
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 14:46:12
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 10:46:08.825681 2026] [security2:error] [pid 7828:tid 7828] [client 172.70.135.199:13541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stormstrips.com"] [uri "/.git/config"] [unique_id "af9IsL-9F01iGqhaf_4OxwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 01:38:18
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 21:38:13.874429 2026] [security2:error] [pid 1379359:tid 1379359] [client 172.70.135.199:12658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.furryfriendzy.org"] [uri "/.env.old"] [unique_id "aeLghQanduzk9PqNsmxPEAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 01:02:23
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 21:02:18.633754 2026] [security2:error] [pid 19287:tid 19287] [client 172.70.135.199:10131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.confidantservice.com"] [uri "/.env.staging"] [unique_id "acsdGjyb6JGhhthQOHOSCAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:28:12
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:28:05.418594 2026] [security2:error] [pid 17621:tid 17621] [client 172.70.135.199:10201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sahinozalit.com"] [uri "/root/.env"] [unique_id "acqypSUOsCSaoJSe2uSr3wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 16:09:39
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 12:09:31.081609 2026] [security2:error] [pid 8132:tid 8132] [client 172.70.135.199:12169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jetzilla.com"] [uri "/.env.dev"] [unique_id "acqgOy31HdAuaKermDW1ugAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 15:52:03
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 11:51:56.778174 2026] [security2:error] [pid 30273:tid 30273] [client 172.70.135.199:14267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.icansayit.com"] [uri "/.env.production"] [unique_id "acqcHA-hzmadK_2RxUtXygAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
