🇺🇸
TPI-Abuse
2026-10-12 03:51:15
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 23:51:10.914071 2026] [security2:error] [pid 11890:tid 11890] [client 172.71.182.133:10165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intergalactichuman.com"] [uri "/.svn/entries"] [unique_id "asxZLrOtJ6xrUH5bFxeguwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
abdubhai
2026-10-11 16:17:22
(14 hours ago)
172.71.182.133 - - [11/Oct/2026:
...
Brute-Force
🇺🇸
TPI-Abuse
2026-10-11 16:10:11
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 12:10:04.847669 2026] [security2:error] [pid 17195:tid 17276] [client 172.71.182.133:13148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marinkovich.org"] [uri "/.env.old"] [unique_id "asu03KZ7fOiiqSYUvPowXAAAAc4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 15:39:01
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 11:38:53.232022 2026] [security2:error] [pid 18133:tid 18133] [client 172.71.182.133:10223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justiart.com"] [uri "/wp-config.php.save"] [unique_id "asutjX4zyPXwZIldFceEdgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 10:20:49
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 06:20:42.143351 2026] [security2:error] [pid 10042:tid 10042] [client 172.71.182.133:14192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bigholegolf.com"] [uri "/.env.local"] [unique_id "asti-ueEIaE_CCzRHyipqwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 08:40:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 04:40:02.523618 2026] [security2:error] [pid 13057:tid 13057] [client 172.71.182.133:14256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barbaraehill.com"] [uri "/.env.old"] [unique_id "asn54icbbiIRGuT5lrk7SQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 08:21:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 04:21:43.417544 2026] [security2:error] [pid 14971:tid 14971] [client 172.71.182.133:13893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.stapleton.productions"] [uri "/.env.production"] [unique_id "asn1l2cNAc28jmTG5LSFvQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-10 00:42:59
(2 days ago)
[SatOct1002:42:53.4201882026][security2:error][pid336422:tid336556][client172.71.182.133:0]ModSecuri ...
show more
[SatOct1002:42:53.4201882026][security2:error][pid336422:tid336556][client172.71.182.133:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"osteriabreno.ch\"][uri\"/wp-config.php.save\"][unique_id\"asmKDeG7xfsEFluwaDLqewAAAVU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇪🇸
Gem
2026-10-09 22:08:01
(2 days ago)
Unauthorized web scan.
Web App Attack
🇦🇺
crispi
2026-10-09 10:39:55
(2 days ago)
Port scan from 172.71.182.133
Port Scan
🇺🇸
TPI-Abuse
2026-10-09 04:59:44
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 00:59:36.589464 2026] [security2:error] [pid 30827:tid 30827] [client 172.71.182.133:13640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeremyscraig.com"] [uri "/.env.staging"] [unique_id "ash0uNQCyXiA7t2Dgr_OpgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 03:20:40
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:20:35.702059 2026] [security2:error] [pid 23899:tid 23899] [client 172.71.182.133:11192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lawrencehale.com"] [uri "/.env.backup"] [unique_id "ashdg1fTTUgrGQtnOGIA2QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 08:29:47
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 04:29:42.312201 2026] [security2:error] [pid 4197:tid 4197] [client 172.71.182.133:10580] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||acquivest.net|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "acquivest.net"] [uri "/index.php.bak"] [unique_id "asdUdh31BfEkAO74QcD85AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 06:12:20
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 02:12:14.311385 2026] [security2:error] [pid 15871:tid 15871] [client 172.71.182.133:14160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abakada.net"] [uri "/.env.dev"] [unique_id "asc0PpFQ10OGdErHfVLemQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-08 05:51:23
(4 days ago)
Sensitive Configuration File Disclosure.
Hacking
