πΊπΈ
TPI-Abuse
2026-08-26 09:30:37
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:30:34.235869 2026] [security2:error] [pid 3721634:tid 3722140] [client 172.71.232.93:11855] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.re52s.com"] [uri "/.git/HEAD"] [unique_id "ao6yOlg18Sa8safm3op1bAAAAkg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 06:59:50
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:59:43.443690 2026] [security2:error] [pid 11250:tid 11250] [client 172.71.232.93:12881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.automationmp.com"] [uri "/.git/HEAD"] [unique_id "ao6O364wYzqZWgjb1jmsEAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-26 02:39:13
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 22:39:08.197452 2026] [security2:error] [pid 11084:tid 11084] [client 172.71.232.93:12207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.garysgates.com"] [uri "/.git/config"] [unique_id "ao5RzPRvilFq2efyGSbP4AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
technojoe99
2026-08-25 22:58:12
(16 hours ago)
Exploit scan from 172.71.232.93. GET /.git/config HTTP/2.0.
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-25 14:23:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:23:26.353547 2026] [security2:error] [pid 16453:tid 16514] [client 172.71.232.93:9962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.famousafricanamericanartist.com.aafm.us"] [uri "/.git/config"] [unique_id "ao2lXvP2oroZeu7OLJj4AwAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-24 22:31:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 18:31:45.452309 2026] [security2:error] [pid 2416:tid 2416] [client 172.71.232.93:13345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.glaswood.com"] [uri "/.git/HEAD"] [unique_id "aozGUWtS8n0sa9nxFzD_sgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπ¦
URAN Publishing Service
2026-08-24 22:03:42
(1 day ago)
[25/Aug/2026:01:03:41 +0300] -- 172.71.232.93 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[25/Aug/2026:01:03:41 +0300] -- 172.71.232.93 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-24 20:56:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:56:40.188241 2026] [security2:error] [pid 14065:tid 14104] [client 172.71.232.93:10902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.icbc-canada.com"] [uri "/.git/config"] [unique_id "aoywCLlI_Z-B_hYxCntxMQAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¦πΊ
paulshipley.com.au
2026-08-24 20:13:47
(1 day ago)
[Tue Aug 25 06:13:46.138241 2026] [security2:error] [pid 129485] [client 172.71.232.93:12517] [clien ...
show more
[Tue Aug 25 06:13:46.138241 2026] [security2:error] [pid 129485] [client 172.71.232.93:12517] [client 172.71.232.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/.git/config"] [unique_id "aoyl-obqMPXQCNGyIgpkRgAAAAQ"]
...
show less
Web App Attack
π§π¬
Stoyko Stoykov
2026-08-24 18:27:27
(1 day ago)
172.71.232.93 - - [24/Aug/2026:21:27:27 +0300] "GET /.env.backup HTTP/2.0" 404 0 "-" "Mozilla/5.0 (W ...
show more
172.71.232.93 - - [24/Aug/2026:21:27:27 +0300] "GET /.env.backup HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
π¦πΊ
paulshipley.com.au
2026-08-24 04:05:46
(2 days ago)
[Mon Aug 24 14:05:45.266588 2026] [security2:error] [pid 63733] [client 172.71.232.93:11446] [client ...
show more
[Mon Aug 24 14:05:45.266588 2026] [security2:error] [pid 63733] [client 172.71.232.93:11446] [client 172.71.232.93] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/.git/config"] [unique_id "aovDGWvajXsEEW6Fq23DnwAAAA0"]
...
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-24 02:17:28
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 22:17:24.157710 2026] [security2:error] [pid 27000:tid 27000] [client 172.71.232.93:12073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.adm-sal.com"] [uri "/.git/config"] [unique_id "aouptDlMHcAw4JclcT4y7gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-23 05:38:51
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 01:38:46.320798 2026] [security2:error] [pid 6517:tid 6517] [client 172.71.232.93:10634] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.omronparts.crazycontrols.com"] [uri "/.git/HEAD"] [unique_id "aoqHZqCYjaPRnDRJ67iCjgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-22 20:16:52
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:16:48.651623 2026] [security2:error] [pid 2890:tid 2890] [client 172.71.232.93:10849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.retiredengineers.net"] [uri "/.git/HEAD"] [unique_id "aooDsINsFBFJrnPD6A1alwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-22 17:31:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 13:30:58.725432 2026] [security2:error] [pid 20446:tid 20446] [client 172.71.232.93:13010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johneiden.com"] [uri "/.git/config"] [unique_id "aonc0h8cCC2rrw5txAFm_wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack