πΊπΈ
TPI-Abuse
2026-08-25 12:44:46
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:44:36.710668 2026] [security2:error] [pid 24208:tid 24208] [client 172.71.119.19:14264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.theledman.com"] [uri "/.git/config"] [unique_id "ao2ONH3tjmJZEAQX8lfs5QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-25 12:06:52
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:06:46.490978 2026] [security2:error] [pid 26225:tid 26225] [client 172.71.119.19:10829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.1954topresent.com"] [uri "/.git/config"] [unique_id "ao2FVpRCeEPULxRiuM-qPwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-25 11:34:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 07:33:58.434587 2026] [security2:error] [pid 20471:tid 20471] [client 172.71.119.19:10495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.arzoma.com"] [uri "/.git/config"] [unique_id "ao19ptHSfsenucH_Ul2uPgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π²π½
octageeks.com
2026-08-25 04:25:32
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-25 03:38:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:38:04.344889 2026] [security2:error] [pid 24783:tid 24783] [client 172.71.119.19:13155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.silsby.com"] [uri "/.git/config"] [unique_id "ao0OHEQy6_0tEhNHDp7DsgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-24 20:15:00
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:14:52.118595 2026] [security2:error] [pid 3611:tid 3611] [client 172.71.119.19:9967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.goldenvalley1.com"] [uri "/.git/config"] [unique_id "aoymPJ9ZNA-pa6_hzRiMCgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-24 12:56:03
(1 day ago)
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%25252F%25253Fphpinfo%25253D1 HTTP/1.1" 403 124 ...
show more
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%25252F%25253Fphpinfo%25253D1 HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%25252F HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%252F HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%2F%2E%67%69%74 HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%2F%61%64%6D%69%6E HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%2E%20git HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%2Egit HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%2F%61%70%69 HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:01 +0200] "GET /%61%70%69 HTTP/1.1" 403 124 "-" "curl/8.7.1"
172.71.119.19 - - [24/Aug/2026:14:56:02 +0200] "GET /%252f HTTP/1.1" 403 124 "-" "curl/8.
...
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-24 12:17:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 08:16:59.077186 2026] [security2:error] [pid 5467:tid 5467] [client 172.71.119.19:13144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ava-world.com"] [uri "/.git/config"] [unique_id "aow2O4eZkoej9BZAu3qbOAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-24 07:28:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 03:28:46.355712 2026] [security2:error] [pid 29849:tid 29849] [client 172.71.119.19:9785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.order.thereddoorlounge.com"] [uri "/.git/config"] [unique_id "aovyrvT1sQNceUDnULeWKAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-24 01:18:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 21:18:06.295332 2026] [security2:error] [pid 26987:tid 26987] [client 172.71.119.19:11634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fredlandia.com"] [uri "/.git/config"] [unique_id "aoubzhQK-jlxD5KVWtssCAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-23 13:55:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 09:55:27.459906 2026] [security2:error] [pid 1182249:tid 1182324] [client 172.71.119.19:10595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.emehache.com"] [uri "/.git/HEAD"] [unique_id "aor7z51a6-V_dkaCQZkFzQAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-23 09:50:00
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 05:49:54.099670 2026] [security2:error] [pid 4342:tid 4342] [client 172.71.119.19:12996] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "five96.com"] [uri "/.git/config"] [unique_id "aorCQmyfDFRmIl0TmxRahAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-23 07:10:36
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 03:10:32.675510 2026] [security2:error] [pid 5296:tid 5296] [client 172.71.119.19:10788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.abilityengraving.com"] [uri "/.git/config"] [unique_id "aoqc6AB-B_wBCq-Eu19DdgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-22 16:48:05
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 12:47:59.351933 2026] [security2:error] [pid 12159:tid 12159] [client 172.71.119.19:14127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.stantontownship.org"] [uri "/.git/HEAD"] [unique_id "aonSv3BsWAyi_lZVTQfNUAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-22 10:31:24
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.119.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 06:31:18.430884 2026] [security2:error] [pid 10889:tid 10889] [client 172.71.119.19:9323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kerrywoodandson.com"] [uri "/.git/HEAD"] [unique_id "aol6doz44Stc8kqGEHReTgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack