2026-10-14 23:02:08
(2 hours ago)
IP matched detection query Many sub paths, bad urls forwarding.
Brute-Force
2026-10-13 15:24:41
(1 day ago)
IP matched detection query Many sub paths, bad urls forwarding.
Brute-Force
🇺🇸
TPI-Abuse
2026-08-17 12:48:03
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 08:47:56.652660 2026] [security2:error] [pid 8172:tid 8172] [client 172.71.190.38:9478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lahamllc.com"] [uri "/.git/config"] [unique_id "aoMC_Fknv1VQonBG5F_3xwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MM-bot
2026-08-17 12:05:20
(1 month ago)
URL-probe: HTTP/2 GET request on /.git/config (2026-08-17 14:05:20 UTC+2)
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-17 08:20:36
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:20:30.870653 2026] [security2:error] [pid 13370:tid 13370] [client 172.71.190.38:10568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fundingangelinvestors.com"] [uri "/.git/HEAD"] [unique_id "aoLETpwed7lTm8GuBFVV6AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 02:25:16
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 22:25:09.300071 2026] [security2:error] [pid 3380663:tid 3380663] [client 172.71.190.38:10945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.davidtempleofdeliverance.org"] [uri "/.git/config"] [unique_id "anqIBeyBmnjXTyno-HJJrAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-08 22:12:12
(2 months ago)
Web App Attack
🇺🇸
mnsf
2026-04-04 08:08:22
(6 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 12:28:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 08:28:07.335839 2026] [security2:error] [pid 4574:tid 4607] [client 172.71.190.38:13596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.castaspell.com"] [uri "/.env.example"] [unique_id "acu913CUswJlVlBMLQYnAQAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-03-31 08:45:56
(6 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 03:57:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 23:57:40.185064 2026] [security2:error] [pid 19318:tid 19318] [client 172.71.190.38:10364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.interiorsolutions-stuart.com"] [uri "/.env.docker"] [unique_id "actGNBPKIQRGLgSX6OzxQgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 03:13:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 23:13:04.696673 2026] [security2:error] [pid 8991:tid 8991] [client 172.71.190.38:11666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thekingofweed.com"] [uri "/.env.production"] [unique_id "acs7wLauRG66t_WCKP9E2QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:17:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:17:22.666112 2026] [security2:error] [pid 22588:tid 22588] [client 172.71.190.38:13830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sipco.cl"] [uri "/.env.staging"] [unique_id "acqwIq736MXFmQ4Ic_laJwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:53:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:53:45.901365 2026] [security2:error] [pid 20014:tid 20014] [client 172.71.190.38:10056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.matterofbritain.com"] [uri "/.env.tmp"] [unique_id "acqAaQnz3Rxuqyms3FYQdQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:31:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:31:33.249653 2026] [security2:error] [pid 21742:tid 21742] [client 172.71.190.38:9576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertanders.com"] [uri "/.env.tmp"] [unique_id "acp7NWxVDyhz9sOi2oSyawAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
