🇺🇸
TPI-Abuse
2026-10-16 11:15:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:15:08.725443 2026] [security2:error] [pid 11378:tid 11378] [client 152.237.230.56:51570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.termstech.com"] [uri "/.git/info/refs"] [unique_id "atIHPHhERiN9Pfkx1-VqEAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
joharikop
2026-10-15 21:03:35
(1 week ago)
Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-cred ...
show more
Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-credential-probes jail.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 16:48:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:48:35.590637 2026] [security2:error] [pid 19488:tid 19488] [client 152.237.230.56:56692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.correlationdesign.com"] [uri "/.git/info/refs"] [unique_id "atED42C4LStUku5WrYI-sQAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 16:04:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:04:53.654875 2026] [security2:error] [pid 18043:tid 18043] [client 152.237.230.56:44376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "burnbuns.com"] [uri "/.git/info/refs"] [unique_id "atD5pfl0eyYSc4A0L9ZNDQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 05:57:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 01:57:34.084447 2026] [security2:error] [pid 11632:tid 11632] [client 152.237.230.56:45616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manufacturassantiago.com"] [uri "/.git/info/refs"] [unique_id "atBrTnoIoCdw7pK-zShmPQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 22:14:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:14:19.001276 2026] [security2:error] [pid 31011:tid 31011] [client 152.237.230.56:48576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrobertsignaturehomes.com"] [uri "/.git/info/refs"] [unique_id "as_-u0WUHt5mXFm7ggFGdQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:47:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:47:50.782619 2026] [security2:error] [pid 9047:tid 9047] [client 152.237.230.56:49560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ebric.com"] [uri "/.git/info/refs"] [unique_id "as7DJt-Ab6pcIZu2UqZonwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 19:01:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 15:01:43.120885 2026] [security2:error] [pid 31307:tid 31307] [client 152.237.230.56:56852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tallersprats.com"] [uri "/.git/info/refs"] [unique_id "as6AF5QB2N06GiFH0kh_LwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 18:39:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 14:38:58.834050 2026] [security2:error] [pid 8081:tid 8163] [client 152.237.230.56:52462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lavotel.com"] [uri "/.git/info/refs"] [unique_id "as56wj6AoRwz4NqQdOaliAAAAg0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
