๐บ๐ธ
TPI-Abuse
2026-10-01 04:15:22
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 00:15:16.416333 2026] [security2:error] [pid 25449:tid 25449] [client 172.71.183.146:10720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "the-practical-pionus.com"] [uri "/.git/HEAD"] [unique_id "ar3eVG7mNfzN1gF0AIw5zQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-01 01:57:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 21:57:16.672872 2026] [security2:error] [pid 30634:tid 30710] [client 172.71.183.146:12950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandbarsteve.com"] [uri "/.env"] [unique_id "ar29_NAwr-QxBCFxKbhX9gAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-30 12:20:37
(3 days ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 11:59:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:59:52.277658 2026] [security2:error] [pid 1169:tid 1169] [client 172.71.183.146:12150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boblog111.com"] [uri "/.env"] [unique_id "arz5uAdr5gDi4GMFKz5t-wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 08:29:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 04:28:58.788202 2026] [security2:error] [pid 2494:tid 2494] [client 172.71.183.146:10639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abeltours.com"] [uri "/.env.production"] [unique_id "arzISsQjs8jn4eK6bct3EgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 07:57:22
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:57:16.536719 2026] [security2:error] [pid 5942:tid 5942] [client 172.71.183.146:13094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oakglenhouse.com"] [uri "/.git/config"] [unique_id "arzA3GyYiUIrajhoKD5QzgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-30 05:06:11
(3 days ago)
Trying to access config files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 01:44:04
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:43:59.742066 2026] [security2:error] [pid 611:tid 611] [client 172.71.183.146:14073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.happyvalleynh.org"] [uri "/.svn/entries"] [unique_id "arxpX3I4gJkxECFEwufqDgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 15:21:48
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 11:21:41.382829 2026] [security2:error] [pid 4589:tid 4589] [client 172.71.183.146:11963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.inquisitivequincie.com"] [uri "/.env"] [unique_id "arvXhYxCIS7zDOC041mIwgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 19:59:27
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:59:19.918993 2026] [security2:error] [pid 4055:tid 4055] [client 172.71.183.146:11083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "james.ahlstrom.name"] [uri "/.env.production"] [unique_id "arrHFwE21Kj9hyjt7q0kcgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-28 11:50:13
(5 days ago)
[28/Sep/2026:14:50:12 +0300] -- 172.71.183.146 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.en ...
show more
[28/Sep/2026:14:50:12 +0300] -- 172.71.183.146 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.local HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
Asimar
2026-09-26 14:40:06
(1 week ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted]): (CF_ENABLE)
Port Scan
๐บ๐ฆ
URAN Publishing Service
2026-09-26 11:54:08
(1 week ago)
[26/Sep/2026:14:54:08 +0300] -- 172.71.183.146 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.en ...
show more
[26/Sep/2026:14:54:08 +0300] -- 172.71.183.146 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.production HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 11:32:37
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:32:33.469071 2026] [security2:error] [pid 31454:tid 31454] [client 172.71.183.146:10005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "westernmassaa.net"] [uri "/.env.staging"] [unique_id "aretUbKz32APMrcjaJAkUAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-26 04:59:34
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack