🇺🇸
TPI-Abuse
2026-09-23 08:24:34
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 04:24:27.568066 2026] [security2:error] [pid 32700:tid 32700] [client 172.70.242.167:11987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabver.com"] [uri "/.git/config"] [unique_id "arOMu3gVPQh5R1yWQAnDawAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-30 12:22:37
(3 weeks ago)
Web App Attack
2026-07-24 11:46:38
(2 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
drewf.ink
2026-07-03 18:53:44
(2 months ago)
[18:53] Port scanning. Port(s) scanned: TCP/2087
Port Scan
🇺🇸
wimaxnz
2026-05-17 03:01:45
(4 months ago)
Automated report from 247 Guardian: repeated malicious activity detected. | reason=nginx_badpath
Brute-Force
SSH
Port Scan
🇺🇸
TPI-Abuse
2026-05-08 16:53:54
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 12:53:50.741886 2026] [security2:error] [pid 10275:tid 10275] [client 172.70.242.167:12133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stacyfarm.com"] [uri "/.git/config"] [unique_id "af4VHvl-eeNpvhbQ3AMWZwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 06:02:15
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 02:02:09.352288 2026] [security2:error] [pid 4134:tid 4134] [client 172.70.242.167:9918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jimpharris.com"] [uri "/.git/config"] [unique_id "afLwYQ19dcGyUC8kH9AAlgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 10:46:36
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 06:46:30.692042 2026] [security2:error] [pid 755:tid 755] [client 172.70.242.167:12511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.4115thewestford.com"] [uri "/.git/config"] [unique_id "afHhhvsKYs64CegywQn04QAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-04-17 17:16:43
(5 months ago)
Form spam
Web Spam
🇫🇷
dynamix
2026-04-07 07:53:20
(5 months ago)
Multiple WAF Violations
Web App Attack
🇳🇱
BlueWire Hosting
2026-04-07 05:27:03
(5 months ago)
Probing websites for vulnerabilities
Web App Attack
🇳🇱
e.fierstra
2026-04-06 15:34:50
(5 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-04-05 12:05:21
(5 months ago)
Scanning/Probing (18)
Brute-Force
Web App Attack
🇳🇱
jjnxpct
2026-04-05 03:55:28
(5 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-04-04 21:59:16
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.242.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 17:59:06.829063 2026] [security2:error] [pid 13419:tid 13419] [client 172.70.242.167:10819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.probiopharmaceutical.com"] [uri "/core/.env"] [unique_id "adGJqnwc2GblmWRlIoK6lwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
