🇦🇹
René Hickersberger
2026-09-10 13:06:02
(1 month ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Web App Attack
🇫🇷
chengkev
2026-08-21 22:28:59
(2 months ago)
Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-18 04:06:09
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 00:06:02.873205 2026] [security2:error] [pid 25550:tid 25550] [client 172.70.35.61:13527] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 00:06:02.873205 2026] [security2:error] [pid 25550:tid 25550] [client 172.70.35.61:13527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.musicwithsteve.com"] [uri "/.git/config"] [unique_id "aoPaKp8ilxsZDBhOdggtKgAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 00:00:55
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 20:00:49.924525 2026] [security2:error] [pid 6264:tid 6264] [client 172.70.35.61:12669] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 20:00:49.924525 2026] [security2:error] [pid 6264:tid 6264] [client 172.70.35.61:12669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.amdavies15.com"] [uri "/.git/config"] [unique_id "aoOgscwwpoulz5pOJtjSywAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 11:21:57
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:21:51.158131 2026] [security2:error] [pid 25467:tid 25467] [client 172.70.35.61:14241] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:21:51.158131 2026] [security2:error] [pid 25467:tid 25467] [client 172.70.35.61:14241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pinkdrink.com.digitalracemedia.com"] [uri "/.git/HEAD"] [unique_id "aoLuz3M2jWBzVS5sB133KAAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-16 14:37:10
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 03:24:34
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 23:24:28.291312 2026] [security2:error] [pid 579889:tid 579889] [client 172.70.35.61:10673] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 23:24:28.291312 2026] [security2:error] [pid 579889:tid 579889] [client 172.70.35.61:10673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "claireashtontherapy.com"] [uri "/.git/HEAD"] [unique_id "anqV7BwFtDhA9ZG82bpKaQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-12 21:44:50
(4 months ago)
Aggressive web scan
Web App Attack
2026-06-04 15:14:47
(4 months ago)
Aggressive web scan
Web App Attack
2026-05-30 22:15:20
(4 months ago)
Aggressive web scan
Web App Attack
2026-05-14 08:03:36
(5 months ago)
(caddyscan) Scanner path probe from 172.70.35.61 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.70.35.61 - - [14/May/2026:07:18:30 +0000] "GET /.git/config HTTP/1.1" ...
show more
(caddyscan) Scanner path probe from 172.70.35.61 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.70.35.61 - - [14/May/2026:07:18:30 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.35.61 - - [14/May/2026:07:52:00 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.35.61 - - [14/May/2026:07:59:10 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.35.61 - - [14/May/2026:07:59:49 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.70.35.61 - - [14/May/2026:08:03:34 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
🇺🇸
mnsf
2026-04-03 12:05:16
(6 months ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-04-02 11:05:24
(6 months ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-03-31 18:05:31
(6 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 12:25:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 08:25:17.198148 2026] [security2:error] [pid 17244:tid 17244] [client 172.70.35.61:10178] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.35.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 08:25:17.198148 2026] [security2:error] [pid 17244:tid 17244] [client 172.70.35.61:10178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aktkaro.com"] [uri "/api/.env"] [unique_id "acu9LSnwDhS1HceaahvrCQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
