๐บ๐ธ
TPI-Abuse
2026-10-07 08:12:23
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 04:12:17.164243 2026] [security2:error] [pid 17225:tid 17233] [client 172.71.119.123:12611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "titanweb.com.appraisalteam.net"] [uri "/.git/config"] [unique_id "asX-4RCwnhyoNeBEe6dfjQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-07 06:26:03
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 02:25:59.695598 2026] [security2:error] [pid 803:tid 803] [client 172.71.119.123:13445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jakeis.link.greenlight.us"] [uri "/.git/config"] [unique_id "asXl9-qYQpNMvRnbbNCDYQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
rooster
2026-10-05 14:23:38
(2 days ago)
[05/Oct/2026:15:23:36 +0100] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/composer.json" [Client ...
show more
[05/Oct/2026:15:23:36 +0100] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/composer.json" [Client 172.71.119.123] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
[05/Oct/2026:15:23:36 +0100] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/composer.json" [Client 172.71.119.123] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
[05/Oct/2026:15:23:37 +0100] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/backup/.env" [Client 172.71.119.123] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
[05/Oct/2026:15:23:37 +0100] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/backup/.env" [Client 172.71.119.123] [Length 62] [Gzip -] [Sent-to wgdashboard] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
[05/Oct/2026:15:23:37 +0100] - 401 401 - GET https wgd02.netnexus.pt.eu.org "/cms/.env" [Client
...
show less
Hacking
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-03 18:56:23
(3 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ฉ๐ช
4server
2026-10-03 14:23:46
(4 days ago)
[SatOct0316:23:44.2328962026][security2:error][pid3832373:tid3832474][client172.71.119.123:0]ModSecu ...
show more
[SatOct0316:23:44.2328962026][security2:error][pid3832373:tid3832474][client172.71.119.123:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"admin-services.ch\"][uri\"/.git/config\"][unique_id\"asEP8JbsQHuBsbNpgODH8wAAAMg\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-10-01 17:40:53
(5 days ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-09-29 18:35:07
(1 week ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 09:06:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 05:06:12.550564 2026] [security2:error] [pid 10450:tid 10450] [client 172.71.119.123:9253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thedomainevaluator.com.websiterescuecontest.com"] [uri "/.git/config"] [unique_id "art_hJbE0b9rvhuvLV_rWQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-27 19:48:27
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
robotstxt
2026-09-27 08:15:32
(1 week ago)
172.71.119.123 - - [27/Sep/2026:08:12:01 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57 ...
show more
172.71.119.123 - - [27/Sep/2026:08:12:01 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.96" edge="172.71.119.123"
172.71.119.123 - - [27/Sep/2026:08:12:13 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.96" edge="172.71.119.123"
172.71.119.123 - - [27/Sep/2026:08:12:01 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.96" edge="172.71.119.123"
172.71.119.123 - - [27/Sep/2026:08:12:13 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1;
...
show less
Web Spam
Web App Attack
๐น๐ท
ScchutzZ
2026-09-27 04:05:04
(1 week ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
๐ฉ๐ช
robotstxt
2026-09-26 20:10:35
(1 week ago)
172.71.119.123 - - [26/Sep/2026:20:10:05 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57 ...
show more
172.71.119.123 - - [26/Sep/2026:20:10:05 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.104" edge="172.71.119.123"
172.71.119.123 - - [26/Sep/2026:20:10:16 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.102" edge="172.71.119.123"
172.71.119.123 - - [26/Sep/2026:20:09:39 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.105" edge="172.71.119.123"
172.71.119.123 - - [26/Sep/2026:20:09:43 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.
...
show less
Web Spam
Web App Attack
๐ฉ๐ช
robotstxt
2026-09-26 10:23:28
(1 week ago)
172.71.119.123 - - [26/Sep/2026:10:22:10 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57 ...
show more
172.71.119.123 - - [26/Sep/2026:10:22:10 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.96" edge="172.71.119.123"
172.71.119.123 - - [26/Sep/2026:10:22:18 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.103" edge="172.71.119.123"
172.71.119.123 - - [26/Sep/2026:10:22:49 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" "142.250.32.96" edge="172.71.119.123"
172.71.119.123 - - [26/Sep/2026:10:23:08 +0000] "GET /wp-json/tnp/o/59/8214/1805902723.a575f28f52c57b5be862b42c21793b18.gif HTTP/2.0" 400 17 "-" "Mozilla/5.0 (Windows NT 5.1;
...
show less
Web Spam
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 03:45:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 23:45:20.113938 2026] [security2:error] [pid 32367:tid 32367] [client 172.71.119.123:14327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruizpuche.com"] [uri "/.git/config"] [unique_id "arc_0HUL7Fsod7o9zwnKcQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 10:16:58
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 172.71.119.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 06:16:54.001291 2026] [security2:error] [pid 22199:tid 22199] [client 172.71.119.123:12310] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "armstrongenvironmental.com"] [uri "/.git/config"] [unique_id "arZKFW7j3dLM8AuiatsRgwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
