🇧🇪
madeit
2026-09-05 02:24:26
(1 day ago)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-17 22:01:05
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-08-17
Web App Attack
SSH
Hacking
🇺🇸
daveoctober
2026-08-17 08:49:43
(2 weeks ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 08:48:46
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:48:41.902693 2026] [security2:error] [pid 20143:tid 20143] [client 172.71.222.97:12300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "createmaine.arsenaultartistmanagement.com"] [uri "/.git/config"] [unique_id "aoLK6QsZqbVPaiCL3mx8MgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 05:19:30
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:19:25.323497 2026] [security2:error] [pid 8674:tid 8674] [client 172.71.222.97:13756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lyounglaw.com"] [uri "/.git/HEAD"] [unique_id "aoKZ3aGKjTo6cCvxyOfneAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 06:56:03
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 02:55:58.200153 2026] [security2:error] [pid 5443:tid 5443] [client 172.71.222.97:11750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arklahomaflooring.com"] [uri "/.git/config"] [unique_id "aoFe_hRoG9Qb5XfLwaShZwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-14 04:04:19
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 00:04:11.171126 2026] [security2:error] [pid 15190:tid 15190] [client 172.71.222.97:11368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vandermeerlab.org"] [uri "/.git/config"] [unique_id "an6TuzfDkhxGIoswXqt57gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
acadeova
2026-05-14 16:02:55
(3 months ago)
🚨 Recon detected (nft drop)
SRC=172.71.222.97
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(journ ...
show more
🚨 Recon detected (nft drop)
SRC=172.71.222.97
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
🇺🇸
TPI-Abuse
2026-04-03 19:37:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 15:37:28.495077 2026] [security2:error] [pid 21331:tid 21331] [client 172.71.222.97:10653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kathiekate.com"] [uri "/srv/.env"] [unique_id "adAW-BWzi2LJVI3sNMZxbgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 15:17:40
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 11:17:33.522969 2026] [security2:error] [pid 20437:tid 20437] [client 172.71.222.97:14027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kwijlen.com"] [uri "/.env.staging"] [unique_id "ac_aDfcyXtrHw_7eDaGo2wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 12:29:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 08:29:13.744417 2026] [security2:error] [pid 20524:tid 20634] [client 172.71.222.97:10574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pattinauction.com"] [uri "/.git/refs/heads/master"] [unique_id "ac-ymXeEHE8a9hOaBTOojwAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 11:32:12
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 07:32:07.655881 2026] [security2:error] [pid 20513:tid 20513] [client 172.71.222.97:11876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.srossi.net"] [uri "/.env.dev"] [unique_id "ac-lN-sMNtv6Jd7B8gNQNgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 08:21:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 04:21:09.023674 2026] [security2:error] [pid 2181:tid 2181] [client 172.71.222.97:10603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.streetcornerfranchise.com"] [uri "/.env.dev"] [unique_id "ac94dc-DDPdekBMOhFMpsQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 05:23:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 01:23:23.762736 2026] [security2:error] [pid 11449:tid 11449] [client 172.71.222.97:9760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.geceindia.com"] [uri "/.env.staging"] [unique_id "ac9Oy2egxlTwVbYCmtaUYQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 04:01:21
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.222.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 00:01:13.247247 2026] [security2:error] [pid 26643:tid 26643] [client 172.71.222.97:10591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.asociacionmutualsanjose.com"] [uri "/srv/.env"] [unique_id "ac87iSQTuKVvwOfQu5M3ygAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
