Anonymous
2026-09-21 20:13:30
(6 hours ago)
[Mon Sep 21 22:13:29.359096 2026] [authz_core:error] [pid 20037] [client 172.71.124.10:13303] AH0163 ...
show more
[Mon Sep 21 22:13:29.359096 2026] [authz_core:error] [pid 20037] [client 172.71.124.10:13303] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 21 22:13:29.527619 2026] [authz_core:error] [pid 20037] [client 172.71.124.10:13303] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 21 22:13:29.696831 2026] [authz_core:error] [pid 20037] [client 172.71.124.10:13303] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-09-15 20:26:18
(6 days ago)
[Tue Sep 15 22:26:16.806658 2026] [authz_core:error] [pid 7128] [client 172.71.124.10:9643] AH01630: ...
show more
[Tue Sep 15 22:26:16.806658 2026] [authz_core:error] [pid 7128] [client 172.71.124.10:9643] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 15 22:26:16.994826 2026] [authz_core:error] [pid 7128] [client 172.71.124.10:9643] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 15 22:26:17.194267 2026] [authz_core:error] [pid 7128] [client 172.71.124.10:9643] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-09-13 05:17:48
(1 week ago)
172.71.124.10 - - [13/Sep/2026:05:17:14 +0000] "GET /en/config/ HTTP/1.1" 404 50772 "https://www.goo ...
show more
172.71.124.10 - - [13/Sep/2026:05:17:14 +0000] "GET /en/config/ HTTP/1.1" 404 50772 "https://www.google.com/search?q=www.owlbee.nl" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
172.71.124.10 - - [13/Sep/2026:05:17:20 +0000] "GET /nl/config/ HTTP/1.1" 404 50775 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
172.71.124.10 - - [13/Sep/2026:05:17:36 +0000] "GET /.aws/credentials HTTP/1.1" 404 50786 "https://www.google.com/search?q=www.owlbee.nl" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
172.71.124.10 - - [13/Sep/2026:05:17:46 +0000] "GET /.vscode/settings.json HTTP/1.1" 404 50797 "https://www.google.com/search?q=www.owlbee.nl" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
172.71.124.10 - - [13/Sep/2026:05:17:47 +0000] "GET /boots
...
show less
Bad Web Bot
Anonymous
2026-09-11 09:59:36
(1 week ago)
[Fri Sep 11 11:59:34.984431 2026] [authz_core:error] [pid 5709] [client 172.71.124.10:9920] AH01630: ...
show more
[Fri Sep 11 11:59:34.984431 2026] [authz_core:error] [pid 5709] [client 172.71.124.10:9920] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Sep 11 11:59:35.165309 2026] [authz_core:error] [pid 5709] [client 172.71.124.10:9920] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Sep 11 11:59:35.367178 2026] [authz_core:error] [pid 5709] [client 172.71.124.10:9920] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-09-09 16:07:22
(1 week ago)
High-confidence malicious configuration/VCS probe
Web App Attack
Anonymous
2026-09-02 16:47:05
(2 weeks ago)
[Wed Sep 02 18:47:04.504150 2026] [authz_core:error] [pid 20461] [client 172.71.124.10:10853] AH0163 ...
show more
[Wed Sep 02 18:47:04.504150 2026] [authz_core:error] [pid 20461] [client 172.71.124.10:10853] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Sep 02 18:47:04.710652 2026] [authz_core:error] [pid 20461] [client 172.71.124.10:10853] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Sep 02 18:47:04.908701 2026] [authz_core:error] [pid 20461] [client 172.71.124.10:10853] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-08-22 22:26:56
(4 weeks ago)
172.71.124.10 - - [23/Aug/2026:01:26:56 +0300] "GET /crm/.env HTTP/2.0" 404 1 "-" "Mozilla/5.0 (comp ...
show more
172.71.124.10 - - [23/Aug/2026:01:26:56 +0300] "GET /crm/.env HTTP/2.0" 404 1 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"
...
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 05:20:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:20:30.394200 2026] [security2:error] [pid 13015:tid 13015] [client 172.71.124.10:11228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.constructiondomex.com"] [uri "/.git/HEAD"] [unique_id "aoKaHom_n2E4HpubXmbZlwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 03:58:13
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 23:58:06.237719 2026] [security2:error] [pid 512:tid 512] [client 172.71.124.10:10220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.pozzolan.org"] [uri "/.git/HEAD"] [unique_id "aoKGztnIS_xgRxlQjtXnuAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 02:52:07
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 22:52:00.022417 2026] [security2:error] [pid 13594:tid 13594] [client 172.71.124.10:10836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thecollective.org"] [uri "/.git/HEAD"] [unique_id "aoJ3UJS-z0SkqR1idSN2DwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 01:09:11
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 21:09:04.698023 2026] [security2:error] [pid 4482:tid 4482] [client 172.71.124.10:13391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lexie.org"] [uri "/.git/config"] [unique_id "aoJfMBxMfIDcctspiSu6ZAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 00:16:56
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 20:16:51.140160 2026] [security2:error] [pid 18208:tid 18208] [client 172.71.124.10:10517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mroxyge1.mroxygen.org"] [uri "/.git/HEAD"] [unique_id "aoJS80FiddycGVZjxAbGWQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-16 08:43:55
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 04:43:51.199483 2026] [security2:error] [pid 16233:tid 16246] [client 172.71.124.10:9933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.latinofederation.aafm.us"] [uri "/.git/HEAD"] [unique_id "aoF4R9-XbseJboMx25bqZAAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-16 07:38:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 03:38:06.720777 2026] [security2:error] [pid 24803:tid 24803] [client 172.71.124.10:11470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.onlyphotomugs.iyp-home.com"] [uri "/.git/HEAD"] [unique_id "aoFo3rQrcblEGLTIBMsQiAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-16 05:51:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.124.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 01:51:31.823549 2026] [security2:error] [pid 13257:tid 13257] [client 172.71.124.10:14072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yakarinc.com"] [uri "/.git/HEAD"] [unique_id "aoFP46wqMdvv1plSNy23ngAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack