🇺🇸
johnkarlhill
2026-09-11 16:20:14
(12 hours ago)
WebKnight blocked malicious web request on johnkarlhill.com
Brute-Force
SSH
🇧🇪
madeit
2026-09-06 15:17:30
(5 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 13:11:34
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 09:11:29.248067 2026] [security2:error] [pid 24835:tid 24835] [client 172.70.230.117:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.webuildbeaches.com"] [uri "/.git/config"] [unique_id "aomgAZLJb82itUly04p3owAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-08-21 09:54:10
(3 weeks ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇩🇪
acadeova
2026-06-23 18:52:23
(2 months ago)
🚨 Recon detected (nft drop)
SRC=172.70.230.117
Observed=TCP dpt=80 in=enp0s6 ttl=59
Time=recent(jour ...
show more
🚨 Recon detected (nft drop)
SRC=172.70.230.117
Observed=TCP dpt=80 in=enp0s6 ttl=59
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇬🇧
pinguin
2026-06-19 15:50:07
(2 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: RootEvidence/1.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-04 22:04:40
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 18:04:36.697353 2026] [security2:error] [pid 17807:tid 17807] [client 172.70.230.117:9624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ohiobabe.com"] [uri "/backend/.env"] [unique_id "adGK9IEj25DcBE4J5apdNgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 18:12:37
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 14:12:29.350136 2026] [security2:error] [pid 16127:tid 16127] [client 172.70.230.117:13182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pearson-specter.com.iacarbonell.com"] [uri "/.env.old"] [unique_id "adFUjXGRnlqaL3UpRP1f-wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 08:11:30
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 04:11:26.615976 2026] [security2:error] [pid 17602:tid 17602] [client 172.70.230.117:9654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swetzer.net"] [uri "/.env.production"] [unique_id "acY7rpuXxPG7XfSkgQysEQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 07:02:07
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 03:01:59.829363 2026] [security2:error] [pid 24770:tid 24770] [client 172.70.230.117:9802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.roachranch.com"] [uri "/.env.production"] [unique_id "acYrZy90E94rKPwNRKjeOgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 23:54:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 19:54:27.077764 2026] [security2:error] [pid 22233:tid 22233] [client 172.70.230.117:10470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.callahan-co.com"] [uri "/.env.local"] [unique_id "acXHM6rjaz3LHJK5FPA5rQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 20:56:56
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 16:56:47.530085 2026] [security2:error] [pid 8379:tid 8379] [client 172.70.230.117:13900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geodogs.org"] [uri "/.env.docker"] [unique_id "acWdj_48X19cnxMKBGKz9wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 12:41:52
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 08:41:34.731222 2026] [security2:error] [pid 10103:tid 10103] [client 172.70.230.117:13534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fanarch.xyz"] [uri "/.env.production.local"] [unique_id "acUpfoAXXS707BOX9PaHagAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 22:14:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 18:14:36.665690 2026] [security2:error] [pid 27573:tid 27573] [client 172.70.230.117:10368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thebrotherhoodlounge.com"] [uri "/.env.docker"] [unique_id "acReTAqo7Bl_cD9yP-yQjwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 19:07:14
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.230.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 15:07:08.058610 2026] [security2:error] [pid 14050:tid 14050] [client 172.70.230.117:10456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blfmarine.com.lakesidedetectiveagency.com"] [uri "/.env~"] [unique_id "acQyXL4GiTgNUqAEavSGEwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
