🇺🇸
TPI-Abuse
2026-11-15 01:24:11
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:24:08.122550 2026] [security2:error] [pid 186226:tid 186362] [client 172.68.159.170:1343 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:24:08.122550 2026] [security2:error] [pid 186226:tid 186362] [client 172.68.159.170:13432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nobletitles.org"] [uri "/.git/config"] [unique_id "avkJuGXZJR60XQTX9xG-pwAAAkQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-14 21:23:27
UTC ·
(7 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-14T21:21:00.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 05:31:37
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:31:29.379741 2026] [security2:error] [pid 1744:tid 1744] [client 172.68.159.170:9553] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:31:29.379741 2026] [security2:error] [pid 1744:tid 1744] [client 172.68.159.170:9553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jennyfiore.com"] [uri "/.git/HEAD"] [unique_id "avfyMVt04iKHic1-fwBM1wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-14 00:03:16
UTC ·
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
Anonymous
2026-11-12 18:05:19
UTC ·
(2 days ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
4server
2026-11-12 14:43:17
UTC ·
(2 days ago)
[ThuNov1215:43:15.7306452026][security2:error][pid1501555:tid1501628][client172.68.159.170:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ...
show more
[ThuNov1215:43:15.7306452026][security2:error][pid1501555:tid1501628][client172.68.159.170:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoconfig.maurokorangraf.ch\"][uri\"/.git/HEAD\"][unique_id\"avXQg5Xb5WFYfGW7vPhphQAAAIQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇴
jad-abuse
2026-11-12 12:46:00
UTC ·
(2 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 11:38:40
UTC ·
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:38:36.520999 2026] [security2:error] [pid 24447:tid 24447] [client 172.68.159.170:10218] ...
show more
(mod_security) mod_security (id:949110) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:38:36.520999 2026] [security2:error] [pid 24447:tid 24447] [client 172.68.159.170:10218] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "tn.cescfoundation.org"] [uri "/.git/config"] [unique_id "avWlPGr9X49eBaTKPVhBzAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-12 10:53:21
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-12T10:51:11.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:11:19
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:11:12.169655 2026] [security2:error] [pid 12450:tid 12450] [client 172.68.159.170:13202] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:11:12.169655 2026] [security2:error] [pid 12450:tid 12450] [client 172.68.159.170:13202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.golflavahotsprings.com"] [uri "/.git/HEAD"] [unique_id "avVYgIA_9s8xf6rM6qHAHgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:26:46
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:26:39.041760 2026] [security2:error] [pid 29184:tid 29184] [client 172.68.159.170:9511] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:26:39.041760 2026] [security2:error] [pid 29184:tid 29184] [client 172.68.159.170:9511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flugstad.com"] [uri "/.git/config"] [unique_id "avTrn8-On8U6hcTAwCFqwgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-11 10:57:29
UTC ·
(3 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
Anonymous
2026-11-10 21:30:15
UTC ·
(4 days ago)
"GET /.git/config HTTP/2.0"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:49:33
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:49:29.151778 2026] [security2:error] [pid 13076:tid 13076] [client 172.68.159.170:10723] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:49:29.151778 2026] [security2:error] [pid 13076:tid 13076] [client 172.68.159.170:10723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garantaconsulting.internetnameregistration.com"] [uri "/.git/config"] [unique_id "avLamd4mJ-0939F874fzRAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-10 04:03:05
UTC ·
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack