๐บ๐ธ
TPI-Abuse
2026-10-06 08:31:23
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 04:31:11.569914 2026] [security2:error] [pid 4525:tid 4525] [client 172.71.183.14:13219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "csennews.com"] [uri "/wp-config.php.bak"] [unique_id "asSxz3kdvvKtknldlJ8B9AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-06 07:51:04
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 03:50:59.142729 2026] [security2:error] [pid 4105:tid 4105] [client 172.71.183.14:12638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "epicjellyfish.com"] [uri "/wp-config.php.save"] [unique_id "asSoY44Z4Z8ZMoR6xL_3pQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-06 02:59:53
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 22:59:46.227540 2026] [security2:error] [pid 32221:tid 32221] [client 172.71.183.14:10167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landjudging.com"] [uri "/wp-config.php"] [unique_id "asRkIqAz8w2aj9qZU8jnuAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-01 19:05:04
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 15:04:59.652040 2026] [security2:error] [pid 15163:tid 15163] [client 172.71.183.14:10552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "decroos.org"] [uri "/.env.staging"] [unique_id "ar6u2-KGznf9w85cuN20cAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 20:02:25
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:02:18.366558 2026] [security2:error] [pid 31567:tid 31567] [client 172.71.183.14:11176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blindshine.com"] [uri "/.env.staging"] [unique_id "arwZSjIP2G-G-XPUCho4XgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 08:24:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 04:24:10.990177 2026] [security2:error] [pid 22492:tid 22492] [client 172.71.183.14:12538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ashleycroft.com"] [uri "/.svn/entries"] [unique_id "art1qnCj4BSgN7WGF7kUCgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 16:44:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:44:07.948457 2026] [security2:error] [pid 19220:tid 19220] [client 172.71.183.14:10539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerkiteforum.com"] [uri "/.env.staging"] [unique_id "arqZV-xreQuT7rTjUM_DCQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-09-26 11:34:12
(1 week ago)
[SatSep2613:34:06.0969082026][security2:error][pid629033:tid629148][client172.71.183.14:0]ModSecurit ...
show more
[SatSep2613:34:06.0969082026][security2:error][pid629033:tid629148][client172.71.183.14:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"ticinosystem.ch\"][uri\"/.env.local\"][unique_id\"aretrkm1gU31yxfGZqJhbQAAAIU\"]
show less
Hacking
Web App Attack
Anonymous
2026-09-22 21:19:46
(1 week ago)
[Tue Sep 22 23:19:16.156344 2026] [authz_core:error] [pid 12800] [client 172.71.183.14:14177] AH0163 ...
show more
[Tue Sep 22 23:19:16.156344 2026] [authz_core:error] [pid 12800] [client 172.71.183.14:14177] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 22 23:19:16.170890 2026] [authz_core:error] [pid 12799] [client 172.71.183.14:14182] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 22 23:19:45.187573 2026] [authz_core:error] [pid 13005] [client 172.71.183.14:9990] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ง๐ช
madeit
2026-09-19 22:12:27
(2 weeks ago)
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-18 22:01:37
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-09-18
Web App Attack
SSH
Hacking
Anonymous
2026-09-15 21:47:18
(2 weeks ago)
[Tue Sep 15 23:41:45.890823 2026] [authz_core:error] [pid 7574] [client 172.71.183.14:9390] AH01630: ...
show more
[Tue Sep 15 23:41:45.890823 2026] [authz_core:error] [pid 7574] [client 172.71.183.14:9390] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 15 23:47:17.989978 2026] [authz_core:error] [pid 7136] [client 172.71.183.14:11948] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Sep 15 23:47:18.138609 2026] [authz_core:error] [pid 7136] [client 172.71.183.14:11948] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-09-14 13:48:57
(3 weeks ago)
[Mon Sep 14 15:48:29.374809 2026] [authz_core:error] [pid 12398] [client 172.71.183.14:12502] AH0163 ...
show more
[Mon Sep 14 15:48:29.374809 2026] [authz_core:error] [pid 12398] [client 172.71.183.14:12502] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 14 15:48:56.293469 2026] [authz_core:error] [pid 12459] [client 172.71.183.14:12112] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://wolfgang-eitel.de/wp/wp-admin/
[Mon Sep 14 15:48:56.334839 2026] [authz_core:error] [pid 12459] [client 172.71.183.14:12112] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://wolfgang-eitel.de/wp/wp-admin/
...
show less
Web App Attack
Anonymous
2026-09-14 01:57:56
(3 weeks ago)
[Mon Sep 14 03:57:55.323434 2026] [authz_core:error] [pid 23046] [client 172.71.183.14:13821] AH0163 ...
show more
[Mon Sep 14 03:57:55.323434 2026] [authz_core:error] [pid 23046] [client 172.71.183.14:13821] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://wolfgang-eitel.de/wp/wp-admin/
[Mon Sep 14 03:57:55.341885 2026] [authz_core:error] [pid 23046] [client 172.71.183.14:13821] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://wolfgang-eitel.de/wp/wp-admin/
[Mon Sep 14 03:57:55.360508 2026] [authz_core:error] [pid 23046] [client 172.71.183.14:13821] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://wolfgang-eitel.de/wp/wp-admin/
...
show less
Web App Attack
Anonymous
2026-09-10 04:54:37
(3 weeks ago)
[Thu Sep 10 06:54:13.988005 2026] [authz_core:error] [pid 13836] [client 172.71.183.14:9935] AH01630 ...
show more
[Thu Sep 10 06:54:13.988005 2026] [authz_core:error] [pid 13836] [client 172.71.183.14:9935] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Sep 10 06:54:32.534562 2026] [authz_core:error] [pid 13833] [client 172.71.183.14:12992] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Sep 10 06:54:35.432783 2026] [authz_core:error] [pid 13833] [client 172.71.183.14:12992] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack