๐บ๐ธ
TPI-Abuse
2026-03-16 16:24:36
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 12:24:28.118813 2026] [security2:error] [pid 12443:tid 12443] [client 172.71.164.150:12804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photosirel.osmansirel.com"] [uri "/.env"] [unique_id "abguvJP0blay0X4fCHVyygAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-16 12:34:32
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 08:34:29.752621 2026] [security2:error] [pid 7228:tid 7228] [client 172.71.164.150:9238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billdavidow.virlouise.com"] [uri "/.git/config"] [unique_id "abf41aME-1FE9Q6o308MGwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-15 22:37:20
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 18:37:15.546239 2026] [security2:error] [pid 31822:tid 31822] [client 172.71.164.150:11667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.naturopathicsource.com"] [uri "/.env"] [unique_id "abc0my_H2owIMlLqQqNXkwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-15 13:18:33
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 09:18:26.375818 2026] [security2:error] [pid 2049:tid 2049] [client 172.71.164.150:9963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wurkroom.biz"] [uri "/.env"] [unique_id "abaxovP3lKt15Q2NUQA59AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-15 08:09:50
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 04:09:44.831514 2026] [security2:error] [pid 10740:tid 10746] [client 172.71.164.150:10090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.annaly.org"] [uri "/.git/config"] [unique_id "abZpSKmv_mAeDh0pEK5tQAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-15 04:33:52
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 00:33:48.511751 2026] [security2:error] [pid 12531:tid 12531] [client 172.71.164.150:12854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.masterfulenlighteningfreestudies.org"] [uri "/.git/HEAD"] [unique_id "abY2rONjdhgikCGRNsw59wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-13 13:26:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 09:26:16.898700 2026] [security2:error] [pid 1264:tid 1264] [client 172.71.164.150:9275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solutionsint.com.crestrong.com"] [uri "/.git/HEAD"] [unique_id "abQQeML5CZfcPfH0l6Np7wAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-13 08:02:35
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 04:02:28.673757 2026] [security2:error] [pid 9670:tid 9670] [client 172.71.164.150:12623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.orborienting.com"] [uri "/.git/config"] [unique_id "abPElBe73CCouOm10FcmJAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-02 18:56:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 13:56:02.909701 2026] [security2:error] [pid 15757:tid 15757] [client 172.71.164.150:12247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sinko-intl.com"] [uri "/.git/config"] [unique_id "aaXdQoeo4wl4KKiry-z-8wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-01 13:16:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.164.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 08:16:36.336148 2026] [security2:error] [pid 19793:tid 19793] [client 172.71.164.150:13856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modalguitarist.com"] [uri "/.git/config"] [unique_id "aaQ8NAK8FZJChtjmQzmEWgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
informedclearly.com
2026-03-01 07:15:16
(3 months ago)
WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.git/config? ua=curl/8.4.0
Hacking
Anonymous
2026-02-09 20:53:19
(3 months ago)
[Mon Feb 09 21:53:17.899938 2026] [authz_core:error] [pid 26375] [client 172.71.164.150:11614] AH016 ...
show more
[Mon Feb 09 21:53:17.899938 2026] [authz_core:error] [pid 26375] [client 172.71.164.150:11614] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Feb 09 21:53:18.446838 2026] [authz_core:error] [pid 26375] [client 172.71.164.150:11614] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Feb 09 21:53:18.553052 2026] [authz_core:error] [pid 26375] [client 172.71.164.150:11614] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-02-09 18:06:27
(3 months ago)
[Mon Feb 09 19:06:26.387326 2026] [authz_core:error] [pid 25671] [client 172.71.164.150:10938] AH016 ...
show more
[Mon Feb 09 19:06:26.387326 2026] [authz_core:error] [pid 25671] [client 172.71.164.150:10938] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Feb 09 19:06:26.439169 2026] [authz_core:error] [pid 25671] [client 172.71.164.150:10938] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Feb 09 19:06:26.501236 2026] [authz_core:error] [pid 25671] [client 172.71.164.150:10938] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ณ๐ฑ
ReporTR
2026-02-06 00:24:51
(3 months ago)
Repeated malicious activity detected by Fail2Ban jail 'plesk-modsecurity'. TCP connection completed. ...
show more
Repeated malicious activity detected by Fail2Ban jail 'plesk-modsecurity'. TCP connection completed. IP banned.
show less
Hacking
Web App Attack
๐ฉ๐ช
Blexyel
2026-01-21 02:43:48
(4 months ago)
172.71.164.150 - - [21/Jan/2026:02:43:45 +0000] "GET /.git/config HTTP/1.1" 200 2116 "-" "Mozilla/5. ...
show more
172.71.164.150 - - [21/Jan/2026:02:43:45 +0000] "GET /.git/config HTTP/1.1" 200 2116 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
...
show less
Brute-Force
Web App Attack