2026-10-18 21:59:30
(14 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-10-18 08:06:59
(1 day ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-06 22:52:33
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 09:30:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:30:13.554007 2026] [security2:error] [pid 17372:tid 17372] [client 172.71.194.90:9668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.burke698.org"] [uri "/.git/HEAD"] [unique_id "aoLUpS3JHSLul498c9mlIQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 06:11:47
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:11:41.428871 2026] [security2:error] [pid 8288:tid 8288] [client 172.71.194.90:10413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.isyourcorporationsafe.com.alanmariotti.com"] [uri "/.git/HEAD"] [unique_id "aoKmHU_JE51eYxu9Uj2qPwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 08:22:44
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 04:22:37.367344 2026] [security2:error] [pid 28560:tid 28560] [client 172.71.194.90:13071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gilmourleigh.vanemby.com"] [uri "/.git/config"] [unique_id "aoFzTW6ke6PJfGh_ipeTKwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 01:38:50
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 21:38:44.735506 2026] [security2:error] [pid 3236034:tid 3236034] [client 172.71.194.90:11370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.elessenux.com"] [uri "/.git/config"] [unique_id "anp9JHKAYejjsLxxG0FaDwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-08 15:03:39
(2 months ago)
Web App Attack
🇦🇺
paulshipley.com.au
2026-05-15 11:01:31
(5 months ago)
levellagiftware.com.au:443 172.71.194.90 - - [15/May/2026:21:01:28 +1000] "GET /.aws/credentials HTT ...
show more
levellagiftware.com.au:443 172.71.194.90 - - [15/May/2026:21:01:28 +1000] "GET /.aws/credentials HTTP/1.1" 404 200424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 07:58:40
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:58:07.174951 2026] [security2:error] [pid 21467:tid 21467] [client 172.71.194.90:12595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computerservicesofflorida.com"] [uri "/.env.development"] [unique_id "agbSDy7OIqx4IG3bztp07wAAAAA"], referer: https://www.google.com/search?q=computerservicesofflorida.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 13:48:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 09:48:35.684302 2026] [security2:error] [pid 8500:tid 8500] [client 172.71.194.90:11446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.velocitymech.com"] [uri "/config/.env.local"] [unique_id "acaKs3-hBl7VWCbJIZIQdQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 05:43:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 01:43:29.902454 2026] [security2:error] [pid 30285:tid 30285] [client 172.71.194.90:11368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.msbookforkids.com"] [uri "/.env.development"] [unique_id "acTHgQvknNSChi6FjzmFQwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 05:01:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 01:00:56.127747 2026] [security2:error] [pid 18093:tid 18093] [client 172.71.194.90:13138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.styxwamworld.com"] [uri "/site/.env"] [unique_id "acS9iH_SE5C7JJp06AUgkgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 21:03:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 17:03:33.965176 2026] [security2:error] [pid 14755:tid 14755] [client 172.71.194.90:14218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jesuspuzzle.com"] [uri "/config/.env"] [unique_id "acRNpeWz5XuDxNpvLQ73MgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 23:20:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.194.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 19:20:13.207029 2026] [security2:error] [pid 14685:tid 14685] [client 172.71.194.90:11761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wfowisdom.com"] [uri "/.env1"] [unique_id "acMcLWprYZ2cxXpfDda5RAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
