🇳🇱
hxsain
2026-10-07 03:58:53
(2 hours ago)
Blocked by UFW [443/tcp] | SPT: 45284 | TTL: 55 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefi ...
show more
Blocked by UFW [443/tcp] | SPT: 45284 | TTL: 55 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-06 22:52:59
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 18:52:51.105371 2026] [security2:error] [pid 4416:tid 4416] [client 172.70.231.45:11168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blanchebb.com"] [uri "/.htaccess"] [unique_id "asV7wwJt-mD8RcWqa_AMSQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 23:18:22
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 19:18:19.388715 2026] [security2:error] [pid 27147:tid 27147] [client 172.70.231.45:10175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.henrietteg.com"] [uri "/wp-config.php.bak"] [unique_id "asLeu3PHE4EoBSYucKCsqgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-17 09:28:31
(2 weeks ago)
Web App Attack
2026-07-14 22:28:56
(2 months ago)
172.70.231.45 - - [15/Jul/2026:00:28:55 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 ...
show more
172.70.231.45 - - [15/Jul/2026:00:28:55 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.70.231.45 - - [15/Jul/2026:00:28:55 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.70.231.45 - - [15/Jul/2026:00:28:55 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.70.231.45 - - [15/Jul/2026:00:28:55 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
172.70.231.45 - - [15/Jul/2026:00:28:55 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1"
...
show less
Brute-Force
Web App Attack
🇺🇸
oncord
2026-04-20 07:56:56
(5 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-04-10 08:00:04
(5 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-04-01 13:44:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 09:44:27.298401 2026] [security2:error] [pid 22961:tid 22961] [client 172.70.231.45:13137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bespoke-ss.c-w-a-m.com"] [uri "/config/.env.local"] [unique_id "ac0hOyvUkEME8pUspUy-ygAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 13:06:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 09:06:27.379884 2026] [security2:error] [pid 13225:tid 13225] [client 172.70.231.45:13248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cybersoftware.org.crazycoin.net"] [uri "/.env.example"] [unique_id "acaA05qL5LXEZJP1Yc-dSgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 10:21:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 06:21:32.862072 2026] [security2:error] [pid 26325:tid 26325] [client 172.70.231.45:12429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ink2wear.com"] [uri "/.env.development"] [unique_id "acZaLCO5QrqySAbbfVJX4gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 01:08:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 21:08:49.078595 2026] [security2:error] [pid 11421:tid 11421] [client 172.70.231.45:12307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hardlucktattoo.com"] [uri "/.env.example"] [unique_id "acXYoZxWI_wuqKTSpU4U3gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 19:08:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:08:53.060170 2026] [security2:error] [pid 24972:tid 24972] [client 172.70.231.45:10593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.30daysout.com"] [uri "/.env.local"] [unique_id "acWERX-7Otx2m8HWx8DJigAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 16:39:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 12:39:06.885716 2026] [security2:error] [pid 13237:tid 13237] [client 172.70.231.45:12136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.36hoursonly.com"] [uri "/.env.old"] [unique_id "acVhKnpvA77QJh7wqDjnJQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 14:41:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 10:41:38.653323 2026] [security2:error] [pid 4364:tid 4364] [client 172.70.231.45:11607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimhake.com"] [uri "/.env.json"] [unique_id "acVFovXUF_vIrtGnVSMxTgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 13:54:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.231.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 09:54:11.447832 2026] [security2:error] [pid 5019:tid 5019] [client 172.70.231.45:14335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alphaplanning.com"] [uri "/.env.local"] [unique_id "acU6gyXJDgyQb-eybwCj8gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
