🇺🇸
TPI-Abuse
2026-10-01 01:15:25
(34 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 21:15:21.958690 2026] [security2:error] [pid 8354:tid 8354] [client 172.71.183.82:11541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.clinegroupmarketplace.com"] [uri "/.env.backup"] [unique_id "ar20KY_3dMSkVJMeQpXKKAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 12:57:34
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:57:24.618363 2026] [security2:error] [pid 3564:tid 3564] [client 172.71.183.82:9982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abundancecompany.com"] [uri "/.svn/entries"] [unique_id "ar0HNEafFs7JF7euX9Gf_gAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 10:47:02
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:46:57.846736 2026] [security2:error] [pid 15517:tid 15517] [client 172.71.183.82:10892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lusocleaningservice.com"] [uri "/.env.staging"] [unique_id "arzooQzcNJVIhyQLYOJ5xQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 22:57:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:57:24.427279 2026] [security2:error] [pid 31125:tid 31125] [client 172.71.183.82:11542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "female.bodybuildbid.com"] [uri "/.env.backup"] [unique_id "arxCVEIBNaW_d8Hux46EmwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 22:25:18
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:25:11.584949 2026] [security2:error] [pid 23516:tid 23516] [client 172.71.183.82:12584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pointillistic.com"] [uri "/.svn/entries"] [unique_id "arw6x0BLpS9hsYtfobYCFQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 08:50:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 04:50:42.223176 2026] [security2:error] [pid 32617:tid 32617] [client 172.71.183.82:11451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "millmade.com"] [uri "/.env.local"] [unique_id "art74iK2PAYJlxztqLFAUQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 05:31:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 01:31:30.021358 2026] [security2:error] [pid 17005:tid 17005] [client 172.71.183.82:10554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.clcmillvale.com"] [uri "/.env.local"] [unique_id "artNMg8kEzbjkOsL5pYueAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 00:32:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:32:45.956973 2026] [security2:error] [pid 10277:tid 10369] [client 172.71.183.82:12222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.metropaint.net"] [uri "/.env"] [unique_id "arsHLbS7vrcajVh1VgJw5wAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 22:08:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 18:08:48.454161 2026] [security2:error] [pid 10780:tid 10780] [client 172.71.183.82:12593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.casapapayasanmiguel.com"] [uri "/.env.backup"] [unique_id "arrlcIDaE_aiFgqU5pO4FwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-28 12:25:34
(2 days ago)
[28/Sep/2026:15:25:34 +0300] -- 172.71.183.82 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET / ...
show more
[28/Sep/2026:15:25:34 +0300] -- 172.71.183.82 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 11:00:36
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 07:00:32.990830 2026] [security2:error] [pid 24470:tid 24470] [client 172.71.183.82:13413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.intermixx.com"] [uri "/.env.production"] [unique_id "arpI0G30tRZ6Cya7PPH-6QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-26 13:38:12
(4 days ago)
[26/Sep/2026:16:38:11 +0300] -- 172.71.183.82 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env ...
show more
[26/Sep/2026:16:38:11 +0300] -- 172.71.183.82 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.local HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 13:13:16
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 09:13:10.772654 2026] [security2:error] [pid 4319:tid 4319] [client 172.71.183.82:12157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomweston.net"] [uri "/.git/config"] [unique_id "arfE5rVsEIR8x0yT2FQlygAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Phenix Info
2026-09-26 11:36:47
(4 days ago)
SmallGuard.fr - Forbidden Ext.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 10:54:27
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.183.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 06:54:20.044475 2026] [security2:error] [pid 30055:tid 30055] [client 172.71.183.82:13464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.photosatthebeach.com"] [uri "/.env"] [unique_id "arekXFBDgFgxoCdc0J1vewAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
