🇩🇪
abdubhai
2026-09-13 15:15:12
(1 day ago)
172.70.175.29 - - [13/Sep/2026:2
...
Brute-Force
🇺🇸
johnkarlhill
2026-09-06 20:30:08
(1 week ago)
WebKnight blocked malicious web request on johnkarlhill.com
Brute-Force
SSH
2026-08-18 05:00:59
(4 weeks ago)
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&u=4'&sid=2d695 ...
show more
Automatic report - Vulnerability scan
/forum7/memberlist.php?mode=viewprofile&u=4'&sid=2d695e72e709b473d50a53fcca8944a6
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 11:21:14
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:21:09.255561 2026] [security2:error] [pid 3950:tid 3950] [client 172.70.175.29:13815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.falero.net"] [uri "/.git/HEAD"] [unique_id "aoLupQkPw4BpTLk-WcLORAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 08:30:18
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 04:30:10.660626 2026] [security2:error] [pid 10590:tid 10590] [client 172.70.175.29:12849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fgrotary.org"] [uri "/.git/HEAD"] [unique_id "aoF1EmVfVgcKPbN3X1I3TQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-29 07:00:00
(1 month ago)
Apache probe; attempts=78; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.example ...
show more
Apache probe; attempts=78; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.example | /.env.local | /.env.old | /.env.php.bak | /.env.production | /.env.swp | /.git-credentials | /.git/HEAD | /.git/config | /.hermes/.env | /.openclaw/.env | /actuator | /actuator/configprops | /actuator/mappings | /admin/.env | /api/.env | /backend/.env | /config/.env | /config/.env.php | /core/.env | /laravel/.env | /public/.env | /web/.env
show less
Web App Attack
🇺🇸
octageeks.com
2026-05-20 04:07:02
(3 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
mnsf
2026-04-08 18:05:54
(5 months ago)
Scanning/Probing (18)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 02:38:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 22:38:25.379069 2026] [security2:error] [pid 883851:tid 883851] [client 172.70.175.29:11738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.californiacbcdelegation.com"] [uri "/.env.local"] [unique_id "adRuIbXXIWAT3oTvfKASOQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 12:58:21
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 08:58:12.824988 2026] [security2:error] [pid 16346:tid 16346] [client 172.70.175.29:13361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.corstratinc.com"] [uri "/.env1"] [unique_id "adOt5BtBg0sulLG5hs2kgAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 14:20:46
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 10:20:39.184808 2026] [security2:error] [pid 16239:tid 16239] [client 172.70.175.29:12845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jonleefamily.brushmileage.org"] [uri "/.env.dev"] [unique_id "adJvt0z-_QPFn4PhfJsWwgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 06:59:50
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 02:59:45.209202 2026] [security2:error] [pid 13516:tid 13516] [client 172.70.175.29:10400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.doctoredwinalvarez.com"] [uri "/.env.development"] [unique_id "adIIYUKN8uV7PiZUbl8gvQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 16:34:21
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 12:34:15.331109 2026] [security2:error] [pid 23683:tid 23683] [client 172.70.175.29:12402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.philipma.com"] [uri "/srv/.env"] [unique_id "adE9h5HsE1vE6TbUtuelWwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 11:49:55
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 07:49:51.692377 2026] [security2:error] [pid 8117:tid 8117] [client 172.70.175.29:10525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thewanderingwoods.quest"] [uri "/.env.backup"] [unique_id "adD632tIwodZ0_QDz61qNAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 07:16:33
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.175.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:16:29.193004 2026] [security2:error] [pid 23419:tid 23419] [client 172.70.175.29:11114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.elcocotours.com"] [uri "/.env.dev"] [unique_id "adC6zVZ-QtzB5VK9m3iOBgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
