π§πͺ
madeit
2026-09-12 10:10:23
(3 hours ago)
Web App Attack
π΅π±
MatStef132
2026-08-28 20:07:05
(2 weeks ago)
MatShield L7: blocked on api.klovy.chat (ua-quarantined)
Bad Web Bot
π©πͺ
4server
2026-08-17 09:58:09
(3 weeks ago)
[MonAug1711:58:04.3165962026][security2:error][pid1278478:tid1278505][client172.71.222.77:0]ModSecur ...
show more
[MonAug1711:58:04.3165962026][security2:error][pid1278478:tid1278505][client172.71.222.77:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.buletti-panettoni.ch\"][uri\"/.git/config\"][unique_id\"aoLbLGIHYFIdjVXa2LqHfwAAAJg\"]
show less
Port Scan
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-17 05:39:50
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:39:44.763074 2026] [security2:error] [pid 32558:tid 32558] [client 172.71.222.77:9695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.haerringer.com"] [uri "/.git/HEAD"] [unique_id "aoKeoHlvwvZPfhrrmPfxeAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-16 03:39:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 23:39:20.060529 2026] [security2:error] [pid 21359:tid 21359] [client 172.71.222.77:14032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keeran.org"] [uri "/.git/HEAD"] [unique_id "aoEw6J1dq4PymH9Fw9IQnQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§πͺ
madeit
2026-08-15 00:45:17
(4 weeks ago)
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-13 18:26:34
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 14:26:29.253683 2026] [security2:error] [pid 2878987:tid 2878987] [client 172.71.222.77:11828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nsdorganogram.org"] [uri "/.git/HEAD"] [unique_id "an4MVYbr5PLwl_MMf-4TLwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π²π½
octageeks.com
2026-07-08 04:07:57
(2 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
πΊπΈ
mnsf
2026-04-05 18:05:59
(5 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-03 19:47:16
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 15:47:08.774900 2026] [security2:error] [pid 26427:tid 26427] [client 172.71.222.77:13875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.surfsideautomotive.com"] [uri "/.env_config"] [unique_id "adAZPCLcZn5D2-Aw24jFBwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-03 12:14:37
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 08:14:33.804161 2026] [security2:error] [pid 28645:tid 28645] [client 172.71.222.77:12937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twccsolutions.com"] [uri "/.env_settings"] [unique_id "ac-vKeGt1hdbUGelqF6r5QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-03 11:24:48
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 07:24:43.637640 2026] [security2:error] [pid 10204:tid 10204] [client 172.71.222.77:9914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.azpinklimos.com"] [uri "/config/.env.local"] [unique_id "ac-je5IUBgCypdUWGt_9RgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-03 08:32:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 04:32:39.254190 2026] [security2:error] [pid 29706:tid 29706] [client 172.71.222.77:10872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ufcmusic.com"] [uri "/.env.development.local"] [unique_id "ac97JxYs4pIZU3owk5lH8gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-03 06:43:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 02:43:44.138554 2026] [security2:error] [pid 14764:tid 14764] [client 172.71.222.77:9781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.gracefaerie.com"] [uri "/.env.orig"] [unique_id "ac9hoCiBROXtENMCwIdxrAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-03 06:00:26
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 02:00:17.871078 2026] [security2:error] [pid 4516:tid 4516] [client 172.71.222.77:10610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fonzies.net"] [uri "/.env.save"] [unique_id "ac9XcQROoZVRkQHFE3mtgAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack