🇺🇸
TPI-Abuse
2026-10-07 12:50:57
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 08:50:49.692122 2026] [security2:error] [pid 25165:tid 25165] [client 172.71.183.40:11817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "envirotreecare.com"] [uri "/.env.local"] [unique_id "asZAKX1_K_OEoG_IVzQ_9AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 10:48:46
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 06:48:40.838949 2026] [security2:error] [pid 25499:tid 25499] [client 172.71.183.40:13798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intersystems-aircargo.com"] [uri "/wp-config.php.save"] [unique_id "asYjiKW_Pndmmtyw4LZOKwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 05:25:34
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 01:25:18.545178 2026] [security2:error] [pid 11627:tid 11681] [client 172.71.183.40:11303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotairwelder.com"] [uri "/.git/HEAD"] [unique_id "asXXvk6dypXn9DIvTU7ozQAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 23:33:49
(14 hours ago)
(mod_security) mod_security (id:949110) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 19:33:36.864196 2026] [security2:error] [pid 9745:tid 9745] [client 172.71.183.40:11104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cpectec.com"] [uri "/.env"] [unique_id "asWFUC_lXN2RriyWb9pH3QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 15:12:17
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 11:11:53.663820 2026] [security2:error] [pid 12168:tid 12168] [client 172.71.183.40:12001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vittariacapital.com"] [uri "/.git/config"] [unique_id "asUPuRPWYo94fb31OJpEHgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 13:33:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 09:33:32.915685 2026] [security2:error] [pid 2047869:tid 2047888] [client 172.71.183.40:9357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "siestakeybch.com"] [uri "/.env.production"] [unique_id "asT4rD8XeahQgGB1J8eDpgAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 11:55:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 07:55:04.536050 2026] [security2:error] [pid 1981:tid 1981] [client 172.71.183.40:14258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peregrineproject.com"] [uri "/wp-config.php.save"] [unique_id "asThmLbcfCo4krBe-VnBWQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-10-06 00:31:11
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, source_backup. Observed by 1 sensor(s); 1 hits.
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-03 09:35:52
(4 days ago)
[03/Oct/2026:12:35:52 +0300] -- 172.71.183.40 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-c ...
show more
[03/Oct/2026:12:35:52 +0300] -- 172.71.183.40 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/woocommerce/readme.txt HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-02 12:41:48
(5 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 17:38:37
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:38:29.286332 2026] [security2:error] [pid 21574:tid 21574] [client 172.71.183.40:13726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.beirutbazar.com"] [uri "/.env"] [unique_id "ar6aladFxsqsDrcPNUW1sQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mw
2026-10-01 00:01:22
(6 days ago)
GET /.env.backup HTTP/1.1
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 23:20:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 19:20:35.362666 2026] [security2:error] [pid 8111:tid 8111] [client 172.71.183.40:13409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photokarine.com"] [uri "/.env"] [unique_id "arxHw1ptB4BnM5wUCNvXcgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 01:54:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 21:54:31.301260 2026] [security2:error] [pid 23874:tid 23874] [client 172.71.183.40:9488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.michaelandkatie.us"] [uri "/.env.production"] [unique_id "arsaVydyN3szz443BOvizAAAAHg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 18:32:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:32:51.282723 2026] [security2:error] [pid 767:tid 767] [client 172.71.183.40:12741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "primemanagementmn.com"] [uri "/.env.production"] [unique_id "arqy0033d-P6lO1JyedclQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
