🇩🇪
updown.io
2026-06-04 22:48:53
(1 week ago)
{"level":"info","ts":1780613321.1541853,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1780613321.1541853,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"172.70.243.198","remote_port":"10501","client_ip":"172.70.243.198","proto":"HTTP/1.1","method":"GET","host":"uptime.prashant.me","uri":"/","headers":{"Cdn-Loop":["cloudflare; loops=1"],"Cf-Connecting-Ip":["193.176.86.53"],"Cf-Ipcountry":["DE"],"Connection":["Keep-Alive"],"Accept-Encoding":["gzip, br"],"Accept-Language":["en-us,en;q=0.5"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Cf-Ray":["a06a7c88f94491e7-FRA"],"X-Forwarded-Proto":["https"],"X-Forwarded-For":["193.176.86.53"],"User-Agent":["Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)"]}},"bytes_read":0,"user_id":"","duration":0.000063451,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://uptime.prashant.me/"],"Content-Type":[],"Server":["Caddy"]}}
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 07:38:48
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:38:44.729169 2026] [security2:error] [pid 14660:tid 14698] [client 172.70.243.198:14081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "supercyprus.com"] [uri "/.git/config"] [unique_id "aiErhKnfNMqtu-dwfDiqxAAAAdc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 21:24:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 17:24:39.491540 2026] [security2:error] [pid 30583:tid 30583] [client 172.70.243.198:12890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertocameron.com"] [uri "/.git/config"] [unique_id "ah9KF3zYKevJbHjgj6O3AwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 13:12:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 09:12:27.627266 2026] [security2:error] [pid 17866:tid 17866] [client 172.70.243.198:9288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesmsmall.com"] [uri "/.git/config"] [unique_id "ah7Wuw5ifNjupYeCweVbewAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 10:48:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:48:17.648539 2026] [security2:error] [pid 11882:tid 11882] [client 172.70.243.198:11881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nue18.com"] [uri "/.git/config"] [unique_id "ah608QpUiJrjtrLr4FFzwgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-28 08:44:44
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 04:44:37.831540 2026] [security2:error] [pid 11425:tid 11425] [client 172.70.243.198:11812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loriaco.com.lucid-events.com"] [uri "/.git/config"] [unique_id "ahgAddtJgvBza--XbqbYKQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-05-27 16:15:43
(2 weeks ago)
{"level":"info","ts":1779895419.9723551,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1779895419.9723551,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"172.70.243.198","remote_port":"9601","client_ip":"172.70.243.198","proto":"HTTP/1.1","method":"GET","host":"uptime.prashant.me","uri":"/wp-content/themes/","headers":{"Accept-Encoding":["gzip, br"],"X-Forwarded-For":["4.205.23.164"],"Sec-Fetch-Mode":["navigate"],"Cache-Control":["max-age=0"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Upgrade-Insecure-Requests":["1"],"X-Forwarded-Proto":["https"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Cf-Connecting-Ip":["4.205.23.164"],"Accept":["text/html, application/xhtml+xml, application/xml; q=0.9, image/webp, image/apng, */*; q=0.8, application/signed-exchange; v=b3; q=0.7"],"Accept-Language":["en-US, en; q=0.9"],"Connection":["Keep-Alive"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Site":["none"],"Dnt":["1"],"Sec
...
show less
DDoS Attack
Web App Attack
🇩🇪
FeG Deutschland
2026-05-27 04:32:52
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇷🇺
DZBOT
2026-05-23 02:13:14
(3 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 09:59:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:59:21.018775 2026] [security2:error] [pid 5470:tid 5470] [client 172.70.243.198:13788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desimon.com"] [uri "/.git/config"] [unique_id "af2z-W2Qrv3d4bU-Cn1cPgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 01:09:14
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 21:09:10.822083 2026] [security2:error] [pid 789:tid 789] [client 172.70.243.198:11051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ellesorority.com"] [uri "/.env"] [unique_id "afvmNsm-MktHCzhAoBwLLAAAAA8"], referer: https://www.google.com/search?q=www.ellesorority.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 03:53:35
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.243.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 23:53:30.715679 2026] [security2:error] [pid 29755:tid 29755] [client 172.70.243.198:13411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "namisushionline.com"] [uri "/root/.env"] [unique_id "adHcupOnyszxUDwHcknz7gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Petros Stefanakis
2026-04-03 16:42:03
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 172.70.243.198 (DE/Germany/-)
SQL Injection
🇫🇷
masterguru
2026-04-03 00:48:26
(2 months ago)
Blocked Cloudflare Worker request. Pattern match "." at REQUEST_HEADERS:cf-worker. (5025-196)
Hacking
🇳🇱
debestelapp
2026-04-02 23:00:08
(2 months ago)
Web App Attack