🇺🇸
TPI-Abuse
2026-11-09 16:19:39
UTC ·
(28 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:19:34.479752 2026] [security2:error] [pid 32642:tid 32642] [client 172.68.159.125:9336] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:19:34.479752 2026] [security2:error] [pid 32642:tid 32642] [client 172.68.159.125:9336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cgiaquaticcare.com.virginiabeachlovebird.com"] [uri "/.git/HEAD"] [unique_id "avHylmcZCztDvwKF9h742QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:52:09
UTC ·
(55 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:52:05.611086 2026] [security2:error] [pid 17953:tid 17953] [client 172.68.159.125:9322] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:52:05.611086 2026] [security2:error] [pid 17953:tid 17953] [client 172.68.159.125:9322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renegadestudios.com"] [uri "/.git/config"] [unique_id "avHsJb1apFw6oB9qcm-kYgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:28:47
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:28:43.112802 2026] [security2:error] [pid 21368:tid 21368] [client 172.68.159.125:10024] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:28:43.112802 2026] [security2:error] [pid 21368:tid 21368] [client 172.68.159.125:10024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.auracb.es"] [uri "/.git/HEAD"] [unique_id "avHYmzhXuQrhDTazlRK0VQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 12:20:59
UTC ·
(4 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:24:54
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:24:47.375669 2026] [security2:error] [pid 30912:tid 30912] [client 172.68.159.125:11904] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:24:47.375669 2026] [security2:error] [pid 30912:tid 30912] [client 172.68.159.125:11904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.metaluz.com.sv.mpservice.com.sv"] [uri "/.git/config"] [unique_id "avGRXzkBEqrOvxxAZhDBRwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
pltcldvlpr
2026-11-09 08:52:53
UTC ·
(7 hours ago)
CMS/framework probe: 172.68.159.125 - - [09/Nov/2026:09:52:52 +0100] "GET /.git/config HTTP/2.0" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" asn=13335 org="Cloudflare, Inc." coun ...
show more
CMS/framework probe: 172.68.159.125 - - [09/Nov/2026:09:52:52 +0100] "GET /.git/config HTTP/2.0" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" asn=13335 org="Cloudflare, Inc." country=PL
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:43:40
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:43:33.199076 2026] [security2:error] [pid 20942:tid 20942] [client 172.68.159.125:10242] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:43:33.199076 2026] [security2:error] [pid 20942:tid 20942] [client 172.68.159.125:10242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.villageofallouezwi.gov"] [uri "/.git/config"] [unique_id "avGHtVMANjioCOLKD8uzEgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:23:04
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:22:59.871772 2026] [security2:error] [pid 25121:tid 25121] [client 172.68.159.125:9484] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:22:59.871772 2026] [security2:error] [pid 25121:tid 25121] [client 172.68.159.125:9484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "launderpet.wagsgrooming.com"] [uri "/.git/HEAD"] [unique_id "avFYszl3S8zTNRLDXFxDewAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-08 21:22:28
UTC ·
(19 hours ago)
Accessed trap at '/.git/config'
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:03:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:03:37.695850 2026] [security2:error] [pid 6586:tid 6586] [client 172.68.159.125:14057] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:03:37.695850 2026] [security2:error] [pid 6586:tid 6586] [client 172.68.159.125:14057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weedifyit.pswebsite.com"] [uri "/.git/config"] [unique_id "avCPSay7lwNClEZqrxPNiAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 11:05:57
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:05:53.098764 2026] [security2:error] [pid 22925:tid 22925] [client 172.68.159.125:9628] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:05:53.098764 2026] [security2:error] [pid 22925:tid 22925] [client 172.68.159.125:9628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.anniversarynapkins.com"] [uri "/.git/HEAD"] [unique_id "avBXkYKSGGT5JKHpqMfELAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 06:05:50
UTC ·
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:05:14
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:05:11.701594 2026] [security2:error] [pid 331:tid 346] [client 172.68.159.125:13921] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:05:11.701594 2026] [security2:error] [pid 331:tid 346] [client 172.68.159.125:13921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peapage.pwrcoupling.com"] [uri "/.git/HEAD"] [unique_id "au_097Pp3DIYI5HMQlwP1AAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:46:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:46:56.667104 2026] [security2:error] [pid 21428:tid 21428] [client 172.68.159.125:10368] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:46:56.667104 2026] [security2:error] [pid 21428:tid 21428] [client 172.68.159.125:10368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "john-bell-associates.com"] [uri "/.git/HEAD"] [unique_id "au_wsFOTqDukxqSflnMnIAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-07 22:05:09
UTC ·
(1 day ago)
[mx01aln] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.125 - - [07/Nov/2026:23:05:07 +0100] "GET /.git/HEAD HTTP/2.0" 301 528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Ge ...
show more
[mx01aln] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.125 - - [07/Nov/2026:23:05:07 +0100] "GET /.git/HEAD HTTP/2.0" 301 528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
172.68.159.125 - - [07/Nov/2026:23:05:07 +0100] "GET /.git/config HTTP/2.0" 301 532 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
