🇫🇷
dynamix
2026-11-15 20:57:24
UTC ·
(7 minutes ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-26 00:19:23
UTC ·
(2 weeks ago)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-14 22:00:57
UTC ·
(1 month ago)
Auto-ban: >3000 req/min op 2026-10-14
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-14 02:07:36
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:07:27.055614 2026] [security2:error] [pid 7205:tid 7205] [client 172.71.182.224:14092] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:07:27.055614 2026] [security2:error] [pid 7205:tid 7205] [client 172.71.182.224:14092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mthompson-business-services.com"] [uri "/.env.backup"] [unique_id "as7j3xRIKCVj8rBZEz8d0QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 01:09:47
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:09:33.681856 2026] [security2:error] [pid 3197:tid 3197] [client 172.71.182.224:11930] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 21:09:33.681856 2026] [security2:error] [pid 3197:tid 3197] [client 172.71.182.224:11930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taxgroupsd.com"] [uri "/.env.old"] [unique_id "as7WTXGmxOEBZK8ZA0A85wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:50:51
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:50:40.436656 2026] [security2:error] [pid 15776:tid 15776] [client 172.71.182.224:13815] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:50:40.436656 2026] [security2:error] [pid 15776:tid 15776] [client 172.71.182.224:13815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "westonimports.com"] [uri "/.env.production"] [unique_id "as61wMiJg-JNy_KDhSVffAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 10:00:00
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:59:49.702825 2026] [security2:error] [pid 17779:tid 17779] [client 172.71.182.224:9738] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:59:49.702825 2026] [security2:error] [pid 17779:tid 17779] [client 172.71.182.224:9738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.prcs.biz"] [uri "/.env.old"] [unique_id "as4BFSpqatbzRPC7t0hIuAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-10-13 09:27:10
UTC ·
(1 month ago)
172.71.182.224 - - [13/Oct/2026:12:27:04 +0300] "GET /.env.backup HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
...
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-13 03:01:06
UTC ·
(1 month ago)
[13/Oct/2026:06:01:06 +0300] -- 172.71.182.224 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env.bak HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 02:42:10
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 22:42:03.225445 2026] [security2:error] [pid 11812:tid 11812] [client 172.71.182.224:11962] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 22:42:03.225445 2026] [security2:error] [pid 11812:tid 11812] [client 172.71.182.224:11962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbuttbikini.com"] [uri "/.env.staging"] [unique_id "as2ae4r4oOExLnhFPsvRpgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 02:13:24
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 22:13:17.181220 2026] [security2:error] [pid 13888:tid 13888] [client 172.71.182.224:12584] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 22:13:17.181220 2026] [security2:error] [pid 13888:tid 13888] [client 172.71.182.224:12584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "noramsg.com"] [uri "/.env.old"] [unique_id "as2TvXEnXc51ns2UGcqMfwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 00:48:38
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 20:48:23.389811 2026] [security2:error] [pid 24186:tid 24186] [client 172.71.182.224:11532] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 20:48:23.389811 2026] [security2:error] [pid 24186:tid 24186] [client 172.71.182.224:11532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dylanwalsh.net"] [uri "/.env.backup"] [unique_id "as1_1zyUbgz9wOGDKz4NKAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 11:25:29
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:25:21.680737 2026] [security2:error] [pid 12180:tid 12180] [client 172.71.182.224:10427] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:25:21.680737 2026] [security2:error] [pid 12180:tid 12180] [client 172.71.182.224:10427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spores101.com"] [uri "/.git/config"] [unique_id "aszDoZY5aV72srsAvkSFUgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 10:14:34
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:14:28.104442 2026] [security2:error] [pid 32569:tid 32569] [client 172.71.182.224:9577] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:14:28.104442 2026] [security2:error] [pid 32569:tid 32569] [client 172.71.182.224:9577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chefmarcelcooks.com"] [uri "/.env"] [unique_id "asyzBJKrGTWQ4tNLV61XIgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 00:56:02
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 20:55:55.405682 2026] [security2:error] [pid 8701:tid 8701] [client 172.71.182.224:13320] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.182.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 20:55:55.405682 2026] [security2:error] [pid 8701:tid 8701] [client 172.71.182.224:13320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n4fh.com"] [uri "/.env.dev"] [unique_id "aswwG_NuhcKZ-FShu1K_uQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
