๐บ๐ธ
TPI-Abuse
2026-08-29 03:14:00
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:13:55.125141 2026] [security2:error] [pid 23255:tid 23255] [client 172.71.122.108:10024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cornerstonecharitablescholarshiptrust.org"] [uri "/.git/config"] [unique_id "apJOc-WmEKxg4l5XJymP5gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 17:37:17
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:37:11.981266 2026] [security2:error] [pid 19620:tid 19620] [client 172.71.122.108:12159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwci.winformation.us"] [uri "/.git/HEAD"] [unique_id "apHHR22nYvYuBl9bqnQrOwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-08-26 23:54:58
(2 days ago)
Web App Attack
๐ฉ๐ช
baphomet
2026-08-26 17:26:53
(2 days ago)
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show more
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-08-26T17:26:52Z sensor=fail2ban role=web-canary
src=172.71.122.108
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 13:37:50
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 09:37:43.668527 2026] [security2:error] [pid 15090:tid 15090] [client 172.71.122.108:12062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "box.jen-eric.com"] [uri "/.git/HEAD"] [unique_id "ao2ap15tSXFupNVH4g1BzwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 00:34:52
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 20:34:47.360362 2026] [security2:error] [pid 15030:tid 15030] [client 172.71.122.108:12288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.picklebillystayandplay.com"] [uri "/.git/HEAD"] [unique_id "aozjJ32V7cKSQW_w6l7ugQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 21:34:34
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 17:34:29.928681 2026] [security2:error] [pid 5644:tid 5644] [client 172.71.122.108:11010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kfc.jbaydeliveries.com"] [uri "/.git/config"] [unique_id "aoy45XPdMOqRee9izktGVQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 11:31:07
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 07:31:00.074352 2026] [security2:error] [pid 27656:tid 27656] [client 172.71.122.108:12576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rescuedpekes.com"] [uri "/.git/config"] [unique_id "aowrdAYuuD_TryYywzILwQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-08-23 22:01:51
(5 days ago)
Auto-ban: >3000 req/min op 2026-08-23
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-23 13:40:18
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 09:40:09.916190 2026] [security2:error] [pid 30605:tid 30605] [client 172.71.122.108:13311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.johnhansonmemorial.org"] [uri "/.git/config"] [unique_id "aor4OX5Yy-WrnfNv3H5s0wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 11:02:42
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 07:02:36.717330 2026] [security2:error] [pid 24313:tid 24313] [client 172.71.122.108:14210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.debzy.com"] [uri "/.git/HEAD"] [unique_id "aorTTEvn4wLLnBykhlOFggAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 08:49:55
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 04:49:50.114027 2026] [security2:error] [pid 28449:tid 28449] [client 172.71.122.108:10526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.powderriverinc.com"] [uri "/.git/HEAD"] [unique_id "aoq0LgR47O5eCsv-pRSAwwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-08-20 21:53:56
(1 week ago)
[21/Aug/2026:00:53:55 +0300] -- 172.71.122.108 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.gi ...
show more
[21/Aug/2026:00:53:55 +0300] -- 172.71.122.108 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-20 02:14:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 22:14:32.286140 2026] [security2:error] [pid 29275:tid 29275] [client 172.71.122.108:11319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.esad.com"] [uri "/.git/HEAD"] [unique_id "aoZjCK2R-8nMLl9zYsnjeAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-18 22:41:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.122.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 18:41:21.336667 2026] [security2:error] [pid 5203:tid 5203] [client 172.71.122.108:13159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pericles21.com"] [uri "/.git/HEAD"] [unique_id "aoTfkfIVNyvNzL_QCqkOegAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack