🇧🇪
madeit
2026-08-18 05:25:27
(1 week ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 04:46:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:46:02.243884 2026] [security2:error] [pid 18903:tid 18924] [client 172.71.222.249:11556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gotlib.net"] [uri "/.git/config"] [unique_id "aoKSCqNdGk2ks-lWdhOxQAAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 05:09:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 01:09:45.178537 2026] [security2:error] [pid 5102:tid 5102] [client 172.71.222.249:10503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.chipnado.com"] [uri "/.git/config"] [unique_id "aoFGGUlRag7iMM7HSIY9xQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 04:15:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 00:15:14.922994 2026] [security2:error] [pid 25300:tid 25300] [client 172.71.222.249:10111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.usefulendeavors.org"] [uri "/.git/config"] [unique_id "aoE5UuGCKAW6k4rN-aiIGgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 03:41:58
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 23:41:53.378303 2026] [security2:error] [pid 4717:tid 4717] [client 172.71.222.249:10330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.franciscoforever.evolute.io"] [uri "/.git/HEAD"] [unique_id "aoExgbDSIKZWAGCXnJVXCAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-13 06:49:52
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 02:49:45.474901 2026] [security2:error] [pid 2320451:tid 2320451] [client 172.71.222.249:13305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.splashstation.org"] [uri "/.git/HEAD"] [unique_id "an1pCY1rEYq6sh4TPs4NtQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Furry Network Services
2026-04-19 04:53:02
(4 months ago)
Blocked by UFW [8080/tcp] | SPT: 10720 | TTL: 53 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sef ...
show more
Blocked by UFW [8080/tcp] | SPT: 10720 | TTL: 53 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2026-04-04 05:29:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 01:29:19.417105 2026] [security2:error] [pid 26645:tid 26645] [client 172.71.222.249:11043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ballast-capital.com"] [uri "/.env.production.local"] [unique_id "adChryVUVlV3-xcLd16W6wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 02:49:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 22:49:21.523759 2026] [security2:error] [pid 27691:tid 27691] [client 172.71.222.249:12713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.developerdove.com"] [uri "/.env.prod"] [unique_id "adB8MRsmdxFmSXnmtQvV9wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 11:12:53
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 07:12:46.539339 2026] [security2:error] [pid 9078:tid 9078] [client 172.71.222.249:10100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pamelaweisberg.com"] [uri "/private/.env"] [unique_id "ac-grkeWpcWGkv0xpsLDrQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 10:54:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 06:54:38.012235 2026] [security2:error] [pid 29819:tid 29819] [client 172.71.222.249:12812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.staben.com"] [uri "/core/.env"] [unique_id "ac-cbjfYHSxnUc1SCffEXAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 18:09:30
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 14:09:23.345208 2026] [security2:error] [pid 29011:tid 29011] [client 172.71.222.249:10491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wendywonjungkim.com"] [uri "/.env2"] [unique_id "ac6w06SNqlopJULaIMjdDQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 17:37:17
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 13:37:09.004295 2026] [security2:error] [pid 19837:tid 19858] [client 172.71.222.249:13717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northmiamichamber.org"] [uri "/.env.production.local"] [unique_id "ac6pRa7TgC8Wm-x1-MNuSwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 15:19:23
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 11:19:17.114884 2026] [security2:error] [pid 11047:tid 11047] [client 172.71.222.249:12846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sfgardening.com"] [uri "/.env.bak"] [unique_id "ac6I9c2w699ApsYzbgzk0AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 02:28:11
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 22:28:02.502522 2026] [security2:error] [pid 30680:tid 30680] [client 172.71.222.249:10303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crazycoin.net"] [uri "/.env.development"] [unique_id "ac3UMoNJ-FNBPXo50Suw5AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
