🇩🇪
Ha1fdan
2026-08-21 21:52:17
(4 days ago)
{"level":"info","ts":1787349132.2649343,"logger":"http.log.access","msg":"handled request","request" ...
show more
{"level":"info","ts":1787349132.2649343,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"172.71.194.169","remote_port":"13518","client_ip":"172.71.194.169","proto":"HTTP/1.1","method":"GET","host":"hypixel.dk","uri":"/wp-admin/YkUJz1cAtjd.php","headers":{"Cf-Connecting-Ip":["104.209.144.33"],"Accept-Encoding":["gzip"],"X-Forwarded-For":["104.209.144.33"],"Cf-Ipcountry":["US"],"X-Forwarded-Proto":["http"],"Cf-Ray":["a2ecdd0b6f21d69c-IAD"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Visitor":["{\"scheme\":\"http\"}"],"Connection":["Keep-Alive"]}},"bytes_read":0,"user_id":"","duration":0.000073886,"size":13,"status":404,"resp_headers":{"Server":["Caddy"],"Content-Type":["text/plain; charset=utf-8"]}}
{"level":"info","ts":1787349132.4024475,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"172.71.194.169","remote_port":"13518","client_ip":"172.71.194.169","proto":"HTTP/1.1","method":"GET","host":"hypixel.dk","uri":"/wp-admin/spcA2qaMDHu.php","h
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 04:40:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:40:06.099120 2026] [security2:error] [pid 10111:tid 10111] [client 172.71.194.169:11123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.blessedhavenfarm.com"] [uri "/.git/HEAD"] [unique_id "aoKQpmRk1DP2_zimc80RJwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 07:56:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 03:55:59.563915 2026] [security2:error] [pid 30442:tid 30442] [client 172.71.194.169:11539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.glencottagemusic.com"] [uri "/.git/config"] [unique_id "aoFtD0UusroQMrGeIuDr1QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 05:49:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 01:49:42.168547 2026] [security2:error] [pid 3587560:tid 3587567] [client 172.71.194.169:14063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.veganfiestas.com"] [uri "/.git/HEAD"] [unique_id "aoFPdttRr2GkZSEw84JHtAAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-12 13:16:27
(1 week ago)
Web App Attack
🇺🇸
mnsf
2026-04-02 06:05:43
(4 months ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 18:22:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 14:22:27.942495 2026] [security2:error] [pid 1779:tid 1779] [client 172.71.194.169:12744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.agchurchkuwait.com"] [uri "/.env.development.local"] [unique_id "acbK42sMwzOmubu_rDzFDgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 06:14:38
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 02:14:28.480386 2026] [security2:error] [pid 31687:tid 31687] [client 172.71.194.169:13347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.anbruskitchens.com"] [uri "/.env.development"] [unique_id "acYgRITFvVz9A8y4um2n1QAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 19:42:35
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:42:27.503016 2026] [security2:error] [pid 5711:tid 5711] [client 172.71.194.169:12488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bodegacesarin.cyber507.net"] [uri "/.env.save"] [unique_id "acWMI1icwdD1xyCAPsZwRwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 18:59:06
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 14:58:56.156685 2026] [security2:error] [pid 9741:tid 9741] [client 172.71.194.169:13966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abilityimprinting.abilityengraving.com"] [uri "/admin/.env"] [unique_id "acWB8FU88F_9YnQEQMDyrAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 11:47:35
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 07:47:27.749257 2026] [security2:error] [pid 183193:tid 183193] [client 172.71.194.169:12336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.eboredom.net"] [uri "/.env.development"] [unique_id "acUcz2hx7D1RKMgcHlYxeQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 13:20:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 09:20:07.039345 2026] [security2:error] [pid 25847:tid 25847] [client 172.71.194.169:12162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.macromika.com"] [uri "/.env.production"] [unique_id "acPhB34HLujOMGSS0HUyggAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 23:28:33
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 19:28:22.497862 2026] [security2:error] [pid 16253:tid 16253] [client 172.71.194.169:11815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.apropa.org.sislau.net"] [uri "/.env.bak"] [unique_id "acMeFh0nXbC5GWCUismZ_QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-02-13 11:24:16
(6 months ago)
Form spam
Web Spam
2025-08-23 01:26:11
(1 year ago)
wp admin page access attempt
...
Hacking
Web App Attack