๐บ๐ธ
TPI-Abuse
2026-07-23 20:23:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 16:23:14.009519 2026] [security2:error] [pid 3071994:tid 3071994] [client 140.248.227.139:34722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spyasociados.com"] [uri "/.git/HEAD"] [unique_id "amJ4MjrLNqOlLRS8GKxadwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-07-23 17:29:52
(3 days ago)
[ThuJul2319:29:48.3400392026][security2:error][pid3857185:tid3857372][client140.248.227.139:0]ModSec ...
show more
[ThuJul2319:29:48.3400392026][security2:error][pid3857185:tid3857372][client140.248.227.139:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"ruberticonsulting.ch\"][uri\"/.git/HEAD\"][unique_id\"amJPjNVWwtZdeJXSK60XbAAAAU0\"]
show less
Hacking
Web App Attack
๐ฌ๐ง
abivia
2026-07-22 10:40:07
(4 days ago)
Abivia WAF trigger: Rule scriptKiddies: Dot file access. uri: /.git/HEAD
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-20 17:13:56
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 13:13:50.979090 2026] [security2:error] [pid 12973:tid 12973] [client 140.248.227.139:45312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.crucialpins.com"] [uri "/.git/HEAD"] [unique_id "al5XTraA_q1cIbY8vGlhSQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 14:47:58
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 10:47:50.749371 2026] [security2:error] [pid 1448976:tid 1448976] [client 140.248.227.139:20032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.pharmasalesconnect.com"] [uri "/.git/config"] [unique_id "al41FvlmTeVmV7zJkGvTWwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 06:40:25
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 02:40:20.968994 2026] [security2:error] [pid 13711:tid 13711] [client 140.248.227.139:47432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.francoiseroy.com"] [uri "/.git/HEAD"] [unique_id "al3C1LsmE1P-QrjiOia5SgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 00:54:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 20:54:02.838612 2026] [security2:error] [pid 4362:tid 4838] [client 140.248.227.139:47198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.retrieversocal.com"] [uri "/.git/config"] [unique_id "al1xqo4NVBqQ-oQcjjWLdQAAAkA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-19 02:23:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 22:23:19.492709 2026] [security2:error] [pid 3505:tid 3505] [client 140.248.227.139:10404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brewerfs.com"] [uri "/.git/config"] [unique_id "alw1F2QTZ_kToMlqbh10owAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-18 06:33:22
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 02:33:17.261606 2026] [security2:error] [pid 1876832:tid 1876832] [client 140.248.227.139:47476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.peazy.net"] [uri "/.git/HEAD"] [unique_id "alseLdOk63DXm-dJsYi56wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-18 02:14:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 22:14:09.362833 2026] [security2:error] [pid 2056454:tid 2056454] [client 140.248.227.139:58416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.okeetokee.net"] [uri "/.git/HEAD"] [unique_id "alrhcY0StP6J86krqxHsSAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-17 05:33:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:33:51.390989 2026] [security2:error] [pid 445454:tid 445454] [client 140.248.227.139:30692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.philipma.com"] [uri "/.git/HEAD"] [unique_id "alm-vwBvmifm3WCtXKvR8AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-16 10:47:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:47:39.601297 2026] [security2:error] [pid 31982:tid 31982] [client 140.248.227.139:34886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.adamscott.us"] [uri "/.git/config"] [unique_id "ali2yzblAvK45be9y4vCsQAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-16 10:16:48
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:16:41.396689 2026] [security2:error] [pid 14725:tid 14851] [client 140.248.227.139:4670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barnetts.us"] [uri "/.git/config"] [unique_id "aliviQsE1T4fFp8-G5idUwAAAk8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-16 05:32:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:32:26.952834 2026] [security2:error] [pid 7480:tid 7480] [client 140.248.227.139:11776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.floorsanding.org"] [uri "/.git/config"] [unique_id "alhs6k_wvmBGMy2QLm8UvQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-16 05:15:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 140.248.227.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:15:01.951045 2026] [security2:error] [pid 4202:tid 4202] [client 140.248.227.139:40620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thebarringtongroup.org"] [uri "/.git/config"] [unique_id "alho1Z9OReYSyWkrAE68hgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack