🇺🇸
TPI-Abuse
2026-11-15 01:31:15
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:31:09.047563 2026] [security2:error] [pid 1971190:tid 1971190] [client 172.68.159.159:98 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:31:09.047563 2026] [security2:error] [pid 1971190:tid 1971190] [client 172.68.159.159:9814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhempower.com"] [uri "/.git/HEAD"] [unique_id "avkLXa33CvwaAf2ea1ltZgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 19:21:57
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 14:21:51.425848 2026] [security2:error] [pid 11078:tid 11078] [client 172.68.159.159:9802] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 14:21:51.425848 2026] [security2:error] [pid 11078:tid 11078] [client 172.68.159.159:9802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visithavelock.ca"] [uri "/.git/config"] [unique_id "avi0z6Zp8gMXDU3U3W6AigAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-14 16:32:06
UTC ·
(14 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
Alt255
2026-11-13 21:47:33
UTC ·
(1 day ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.159 - - [13/Nov/2026:22:47:23 +0100] "GET /.git/HEAD HTTP/2.0" 403 1974 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) G ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.159 - - [13/Nov/2026:22:47:23 +0100] "GET /.git/HEAD HTTP/2.0" 403 1974 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-13 16:10:18
UTC ·
(1 day ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:40:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:40:14.204504 2026] [security2:error] [pid 13541:tid 13541] [client 172.68.159.159:11618] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:40:14.204504 2026] [security2:error] [pid 13541:tid 13541] [client 172.68.159.159:11618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.swetzer.net"] [uri "/.git/HEAD"] [unique_id "avba_lyNq_V34X_xmL_A8gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:16:55
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:16:49.574975 2026] [security2:error] [pid 25433:tid 25527] [client 172.68.159.159:11509] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:16:49.574975 2026] [security2:error] [pid 25433:tid 25527] [client 172.68.159.159:11509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desert-automotive.ceol.us"] [uri "/.git/config"] [unique_id "avYQoUHnE365bWFid2OjvwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 16:56:36
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:56:32.866951 2026] [security2:error] [pid 14256:tid 14256] [client 172.68.159.159:13871] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:56:32.866951 2026] [security2:error] [pid 14256:tid 14256] [client 172.68.159.159:13871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.atm.michaelpmcgrath.com"] [uri "/.git/config"] [unique_id "avXvwMmxvlMAfPTK6qqHUwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:34:06
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:33:58.218041 2026] [security2:error] [pid 14750:tid 14750] [client 172.68.159.159:9218] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:33:58.218041 2026] [security2:error] [pid 14750:tid 14750] [client 172.68.159.159:9218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inwriting.englishmagic.us"] [uri "/.git/config"] [unique_id "avXcZgKpXceJOGfGeu6I0wAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:15:55
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:15:48.201541 2026] [security2:error] [pid 26925:tid 26934] [client 172.68.159.159:11256] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:15:48.201541 2026] [security2:error] [pid 26925:tid 26934] [client 172.68.159.159:11256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.vnbcares.com"] [uri "/.git/HEAD"] [unique_id "avXYJPbgFa8_FK_O2iMPgQAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 13:50:34
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:50:29.328370 2026] [security2:error] [pid 18060:tid 18060] [client 172.68.159.159:11578] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:50:29.328370 2026] [security2:error] [pid 18060:tid 18060] [client 172.68.159.159:11578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rentkase.com"] [uri "/.git/config"] [unique_id "avXEJQPtjzigaWBFfWKVvAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 11:05:32
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:05:27.820546 2026] [security2:error] [pid 7170:tid 7170] [client 172.68.159.159:13211] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:05:27.820546 2026] [security2:error] [pid 7170:tid 7170] [client 172.68.159.159:13211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.trompelart.com"] [uri "/.git/config"] [unique_id "avWdd7UOgeae_B1Hig1irwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sternwart
2026-11-12 01:45:19
UTC ·
(3 days ago)
Automatisch erkannt: Zugriff auf /.git/config (raccoon-lounge.ch)
Web App Attack
Bad Web Bot
🇩🇪
altenglaner
2026-11-12 01:04:56
UTC ·
(3 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:29:07
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:29:04.008992 2026] [security2:error] [pid 10825:tid 10825] [client 172.68.159.159:14198] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:29:04.008992 2026] [security2:error] [pid 10825:tid 10825] [client 172.68.159.159:14198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scoretopicturenetwork.com"] [uri "/.git/config"] [unique_id "avTsMLeAZm16NKh9wQJNOwAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
