🇫🇷
dynamix
2026-11-09 14:05:06
UTC ·
(6 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
gbutiri
2026-10-31 05:03:31
UTC ·
(2 weeks ago)
Automated report: source IP probed nonexistent .php paths on our web server (vulnerability scanning / bad bot).
Web App Attack
Bad Web Bot
🇧🇪
madeit
2026-10-25 16:10:27
UTC ·
(3 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-29 04:52:01
UTC ·
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-28 20:47:37
UTC ·
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 11:04:15
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:04:10.840024 2026] [security2:error] [pid 406:tid 406] [client 172.71.223.106:11768] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:04:10.840024 2026] [security2:error] [pid 406:tid 406] [client 172.71.223.106:11768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.winchesterbayvacationrentals.com"] [uri "/.git/config"] [unique_id "aoLqqrbUMqy-fyKw07FzqAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-17 10:02:49
UTC ·
(2 months ago)
[MonAug1712:02:43.8777052026][security2:error][pid1100851:tid1100876][client172.71.223.106:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ...
show more
[MonAug1712:02:43.8777052026][security2:error][pid1100851:tid1100876][client172.71.223.106:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.feldenkraisticino.ch\"][uri\"/.git/HEAD\"][unique_id\"aoLcQ-0OoTNKtGcB71_2dgAAABY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 09:30:49
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:30:42.382551 2026] [security2:error] [pid 332:tid 332] [client 172.71.223.106:11718] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:30:42.382551 2026] [security2:error] [pid 332:tid 332] [client 172.71.223.106:11718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.the-schlosser.net"] [uri "/.git/config"] [unique_id "aoLUwtmsRSBwW0W7BKVGrwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 07:30:38
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:30:32.702288 2026] [security2:error] [pid 27436:tid 27436] [client 172.71.223.106:12167] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:30:32.702288 2026] [security2:error] [pid 27436:tid 27436] [client 172.71.223.106:12167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rockitfish.com"] [uri "/.git/config"] [unique_id "aoK4mJ62zDm1k7J_lIBVaAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-12 18:32:26
UTC ·
(3 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 12:14:06
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 08:13:57.521253 2026] [security2:error] [pid 26366:tid 26366] [client 172.71.223.106:11868] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 08:13:57.521253 2026] [security2:error] [pid 26366:tid 26366] [client 172.71.223.106:11868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.c470techarchive.bahamascruisersguide.com"] [uri "/.env.dev"] [unique_id "agcOBdRQKqVeBd0CcmtKmgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 17:25:44
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 13:25:36.359915 2026] [security2:error] [pid 8264:tid 8264] [client 172.71.223.106:10754] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 13:25:36.359915 2026] [security2:error] [pid 8264:tid 8264] [client 172.71.223.106:10754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.flickr.abecasis.com"] [uri "/app/.env"] [unique_id "ac_4EDfUYKgRESR4FTcbOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 13:24:52
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 09:24:44.381315 2026] [security2:error] [pid 2061:tid 2061] [client 172.71.223.106:12595] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 09:24:44.381315 2026] [security2:error] [pid 2061:tid 2061] [client 172.71.223.106:12595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowdens-landing.com"] [uri "/.env.dev"] [unique_id "ac-_nHnGmxKwmlbe221bdAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 02:57:27
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 22:57:22.164267 2026] [security2:error] [pid 26550:tid 26550] [client 172.71.223.106:10860] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 22:57:22.164267 2026] [security2:error] [pid 26550:tid 26550] [client 172.71.223.106:10860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hollorancompanies.com"] [uri "/.env_settings"] [unique_id "ac8skrMYRrcTtYPqYvklfAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 07:44:03
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 03:43:57.284287 2026] [security2:error] [pid 28277:tid 28277] [client 172.71.223.106:10207] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.223.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 03:43:57.284287 2026] [security2:error] [pid 28277:tid 28277] [client 172.71.223.106:10207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.watsoncousins.net"] [uri "/.env.dev.local"] [unique_id "ac4ePb_7vV7-NfdsktB9GQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
