🇺🇸
TPI-Abuse
2026-08-29 21:36:32
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 17:36:28.114753 2026] [security2:error] [pid 32469:tid 32469] [client 172.71.232.78:9279] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 17:36:28.114753 2026] [security2:error] [pid 32469:tid 32469] [client 172.71.232.78:9279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.stormstrips.info"] [uri "/.git/HEAD"] [unique_id "apNQ3DiUscN-Uz02_Z5iBgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-08-29 19:55:35
UTC ·
(2 months ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
Hacking
Brute-Force
Web App Attack
2026-08-29 03:54:15
UTC ·
(2 months ago)
GET /.git/config HTTP/1.1
...
Web App Attack
2026-08-28 17:18:51
UTC ·
(2 months ago)
Web scanner: GET /.git/config
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-28 08:49:22
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 04:49:15.356784 2026] [security2:error] [pid 29788:tid 29912] [client 172.71.232.78:10561] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 04:49:15.356784 2026] [security2:error] [pid 29788:tid 29912] [client 172.71.232.78:10561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tierrasolymar.com"] [uri "/.git/config"] [unique_id "apFLi_dZ64xOo8HolOJsQwAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 06:16:56
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:16:53.580751 2026] [security2:error] [pid 438402:tid 438502] [client 172.71.232.78:11629] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:16:53.580751 2026] [security2:error] [pid 438402:tid 438502] [client 172.71.232.78:11629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oldcarz.com"] [uri "/.git/config"] [unique_id "apEn1faySz5tNlU03GdwNgAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-28 04:30:06
UTC ·
(2 months ago)
| [Dangerous/Brazil] Aggressive IP 172.71.232.78 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-08-28 01:48:38
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 21:48:32.381037 2026] [security2:error] [pid 29491:tid 29491] [client 172.71.232.78:11509] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 21:48:32.381037 2026] [security2:error] [pid 29491:tid 29491] [client 172.71.232.78:11509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.evelynkay.com"] [uri "/.git/HEAD"] [unique_id "apDo8LWXPRAV0PNlEf1aCQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-27 13:35:12
UTC ·
(2 months ago)
[27/Aug/2026:16:35:12 +0300] -- 172.71.232.78 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-08-27 09:48:29
UTC ·
(2 months ago)
-:443 172.71.232.78 - - [27/Aug/2026:11:48:27 +0200] - "GET /.git/config HTTP/2.0" 404 2745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-27 06:28:14
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 02:28:09.216771 2026] [security2:error] [pid 24838:tid 24838] [client 172.71.232.78:13606] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 02:28:09.216771 2026] [security2:error] [pid 24838:tid 24838] [client 172.71.232.78:13606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lukeschicago.com"] [uri "/.git/HEAD"] [unique_id "ao_Y-d4cOZguVk09vbpL9gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 11:54:47
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 07:54:41.517860 2026] [security2:error] [pid 5480:tid 5480] [client 172.71.232.78:9401] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 07:54:41.517860 2026] [security2:error] [pid 5480:tid 5480] [client 172.71.232.78:9401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kewlkarz.com"] [uri "/.git/config"] [unique_id "ao2CgYrUqSkep5rBFPHSUAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 05:33:00
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 01:32:52.137011 2026] [security2:error] [pid 27799:tid 27799] [client 172.71.232.78:11601] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 01:32:52.137011 2026] [security2:error] [pid 27799:tid 27799] [client 172.71.232.78:11601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.whipchecks.com.au"] [uri "/.git/HEAD"] [unique_id "ao0pBGlLGev81jeaSYlMWQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski.com
2026-08-24 20:22:14
UTC ·
(2 months ago)
IVski WAF | Sensitive file probe - looking for .git
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 06:07:43
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 02:07:37.835216 2026] [security2:error] [pid 21661:tid 21661] [client 172.71.232.78:10486] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 02:07:37.835216 2026] [security2:error] [pid 21661:tid 21661] [client 172.71.232.78:10486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.wild-goose.net"] [uri "/.git/config"] [unique_id "aovfqbQbwWDKXNuSrkKdogAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
