🇫🇷
dynamix
2026-10-11 05:13:35
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 21:50:48
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 17:50:43.989356 2026] [security2:error] [pid 30421:tid 30421] [client 172.71.232.9:11994] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 17:50:43.989356 2026] [security2:error] [pid 30421:tid 30421] [client 172.71.232.9:11994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "simia.com"] [uri "/.git/config"] [unique_id "aslhs-lZNbfGLlWASGFDjQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 14:00:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 10:00:21.654421 2026] [security2:error] [pid 7679:tid 7679] [client 172.71.232.9:10942] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 10:00:21.654421 2026] [security2:error] [pid 7679:tid 7679] [client 172.71.232.9:10942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "protonmultimedia.com"] [uri "/.git/config"] [unique_id "asjzdX0DfFi1AeoVE5U20AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 13:18:04
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 09:18:00.308474 2026] [security2:error] [pid 6583:tid 6583] [client 172.71.232.9:12953] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 09:18:00.308474 2026] [security2:error] [pid 6583:tid 6583] [client 172.71.232.9:12953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "parkgrant.com"] [uri "/.git/config"] [unique_id "asjpiKLqzp4tkBCSQ0esSAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 10:32:53
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 06:32:46.897035 2026] [security2:error] [pid 20769:tid 20769] [client 172.71.232.9:11155] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 06:32:46.897035 2026] [security2:error] [pid 20769:tid 20769] [client 172.71.232.9:11155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathydumesnilart.com"] [uri "/.git/config"] [unique_id "asjCztQkLuBV_fJXYrMP9wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 03:52:08
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:52:04.473224 2026] [security2:error] [pid 5901:tid 5920] [client 172.71.232.9:13837] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:52:04.473224 2026] [security2:error] [pid 5901:tid 5920] [client 172.71.232.9:13837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "21370.com"] [uri "/.git/config"] [unique_id "ashk5GXA0wLfGMYD6MBobQAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-08 16:16:54
UTC ·
(4 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 15:10:19
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 11:10:13.069722 2026] [security2:error] [pid 16918:tid 16918] [client 172.71.232.9:11594] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 11:10:13.069722 2026] [security2:error] [pid 16918:tid 16918] [client 172.71.232.9:11594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaplankrew.royal-barbershop.com"] [uri "/.git/config"] [unique_id "asO91Zz8GxGk5GPNvb_bEAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-04 00:21:01
UTC ·
(1 month ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-30 07:34:39
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:34:32.635479 2026] [security2:error] [pid 31130:tid 31130] [client 172.71.232.9:10113] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:34:32.635479 2026] [security2:error] [pid 31130:tid 31130] [client 172.71.232.9:10113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.innolympics.com"] [uri "/.git/config"] [unique_id "ary7iKUhuwK-oxczs81FrgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 02:06:08
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:06:00.851751 2026] [security2:error] [pid 27475:tid 27516] [client 172.71.232.9:14305] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:06:00.851751 2026] [security2:error] [pid 27475:tid 27516] [client 172.71.232.9:14305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frannykingsmith.com"] [uri "/.git/config"] [unique_id "arxuiGPybf0DxqWVYt6lCQAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 23:51:05
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 19:50:57.166987 2026] [security2:error] [pid 3156:tid 3156] [client 172.71.232.9:12780] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 19:50:57.166987 2026] [security2:error] [pid 3156:tid 3156] [client 172.71.232.9:12780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cartiologyfilms.com"] [uri "/.git/config"] [unique_id "arxO4aRbCsyR3i7z7wifPAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 04:16:44
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 00:16:38.429372 2026] [security2:error] [pid 7727:tid 7727] [client 172.71.232.9:12491] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.232.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 00:16:38.429372 2026] [security2:error] [pid 7727:tid 7727] [client 172.71.232.9:12491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notariaarauco.cl"] [uri "/.git/config"] [unique_id "ariYplfPgtBu60bFoqZNnQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-25 19:29:16
UTC ·
(1 month ago)
172.71.232.9 - - [25/Sep/2026:19:29:15 +0000] "GET /.env HTTP/2.0" 404 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.240.100.200"
172.71.232.9 - - [25/Sep/2026:19:29:15 +0000] "GET /.env.bak HTTP/2.0" 404 198 "-" "Mozilla ...
show more
172.71.232.9 - - [25/Sep/2026:19:29:15 +0000] "GET /.env HTTP/2.0" 404 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.240.100.200"
172.71.232.9 - - [25/Sep/2026:19:29:15 +0000] "GET /.env.bak HTTP/2.0" 404 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.240.100.200"
172.71.232.9 - - [25/Sep/2026:19:29:15 +0000] "GET /.env.local HTTP/2.0" 404 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.240.100.200"
172.71.232.9 - - [25/Sep/2026:19:29:15 +0000] "GET /.env.swp HTTP/2.0" 404 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.240.100.200"
172.71.232.9 - - [25/Sep/2026:19:29:15 +0000] "GET /.gitmodules HTTP/2.0" 404 198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.240.100.200"
...
show less
Port Scan
Brute-Force
2026-09-23 02:39:27
UTC ·
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
