2026-08-30 20:57:00
(4 days ago)
Brute-Force
Bad Web Bot
Exploited Host
🇺🇸
ipblock.com
2026-08-20 20:21:00
(2 weeks ago)
IPBlock protected site ID [4055-d][s=03].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
2026-07-22 11:05:31
(1 month ago)
Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=4
Hacking
🇮🇪
Coolnagour
2026-07-21 12:16:33
(1 month ago)
http-probing: /ads.txt
Web App Attack
🇺🇸
jcbriar
2026-07-20 21:20:35
(1 month ago)
Ignoring robots.txt
Bad Web Bot
🇨🇭
backslash
2026-07-19 19:57:01
(1 month ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-05 23:39:36
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:39:32.692294 2026] [security2:error] [pid 16338:tid 16338] [client 212.107.29.72:2174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grandpont-house.org"] [uri "/.env.local"] [unique_id "akrrNIZVfdrizkvcFq1PzQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 03:38:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 23:38:31.734912 2026] [security2:error] [pid 1584:tid 1584] [client 212.107.29.72:4462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emeraldhighlands.org"] [uri "/.env.production"] [unique_id "akiAN6o08_VpZ7WXVGTTjgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 01:10:55
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 21:10:47.825366 2026] [security2:error] [pid 22982:tid 22982] [client 212.107.29.72:10622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dunbartonucc.org"] [uri "/.env.development"] [unique_id "akhdl_h6v-ARg6EbnbEjFAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 13:04:13
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 09:04:08.084077 2026] [security2:error] [pid 22867:tid 22894] [client 212.107.29.72:33718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dinius.org"] [uri "/wp-config.bak"] [unique_id "akezSD984ywe-_U3Ee0CsgAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-02 08:36:40
(2 months ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 21:35:13
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 212.107.29.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 17:35:01.002877 2026] [security2:error] [pid 950:tid 1005] [client 212.107.29.72:32524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accreditedfinancialanalyst.org"] [uri "/.env.staging"] [unique_id "akLlBSdshwSHigDEJTXOdQAAAU4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-06 13:40:02
(2 months ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇸🇬
pusathosting.com
2026-06-06 10:00:04
(2 months ago)
24ds22 bruteforce
Brute-Force
Web App Attack
🇹🇷
herseycokguzelolacak
2026-05-27 06:00:09
(3 months ago)
Keenetic Firewall: Blocked Traffic (No Port Detected - likely UDP). Blocked 67 times in last 24h.
Port Scan
