🇺🇸
francelink.fr
2026-11-14 20:54:23
UTC ·
(6 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-14T20:52:10.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 17:13:31
UTC ·
(9 hours ago)
(mod_security) mod_security (id:949110) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:13:27.682921 2026] [security2:error] [pid 21492:tid 21492] [client 172.68.159.181:10109] ...
show more
(mod_security) mod_security (id:949110) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:13:27.682921 2026] [security2:error] [pid 21492:tid 21492] [client 172.68.159.181:10109] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "slapai.org"] [uri "/.git/HEAD"] [unique_id "aviWt9n1w6LAj_c1NidsNQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-14 13:41:04
UTC ·
(13 hours ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇳🇱
ipoac.nl
2026-11-13 20:34:46
UTC ·
(1 day ago)
-:443 172.68.159.181 - - [13/Nov/2026:21:34:43 +0100] - "GET /.git/HEAD HTTP/2.0" 404 3031 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-13 11:06:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:06:01.154151 2026] [security2:error] [pid 31952:tid 31952] [client 172.68.159.181:13459] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:06:01.154151 2026] [security2:error] [pid 31952:tid 31952] [client 172.68.159.181:13459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crescentcitycafe.org"] [uri "/.git/config"] [unique_id "avbvGYgI9YmAA_nYvTrAoAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:27:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:27:41.369427 2026] [security2:error] [pid 4327:tid 4327] [client 172.68.159.181:10977] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:27:41.369427 2026] [security2:error] [pid 4327:tid 4327] [client 172.68.159.181:10977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hamiltoncountyuca.org"] [uri "/.git/config"] [unique_id "avbmHWikWri_pIBNYtKbpQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:02:44
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:02:40.044357 2026] [security2:error] [pid 2846:tid 2846] [client 172.68.159.181:11638] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:02:40.044357 2026] [security2:error] [pid 2846:tid 2846] [client 172.68.159.181:11638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.franchiseconsultants.org"] [uri "/.git/HEAD"] [unique_id "avbgQB3HG-BUQDA5ee0X-gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:43:47
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:43:41.986724 2026] [security2:error] [pid 10927:tid 10927] [client 172.68.159.181:9963] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:43:41.986724 2026] [security2:error] [pid 10927:tid 10927] [client 172.68.159.181:9963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nb.nordicbuilders.net"] [uri "/.git/HEAD"] [unique_id "avbbzaC3QPQiTHzetRg8ewAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:03:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:03:14.374668 2026] [security2:error] [pid 8556:tid 8556] [client 172.68.159.181:11231] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:03:14.374668 2026] [security2:error] [pid 8556:tid 8556] [client 172.68.159.181:11231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.californiabrokers.net"] [uri "/.git/HEAD"] [unique_id "avbSUquWrLid56WdBvnpLwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mishan
2026-11-12 19:03:59
UTC ·
(2 days ago)
172.68.159.181 - - [12/Nov/2026:11:03:58 -0800] "GET /.git/HEAD HTTP/1.1" 200 1042069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:04:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:04:42.737728 2026] [security2:error] [pid 17045:tid 17045] [client 172.68.159.181:9869] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:04:42.737728 2026] [security2:error] [pid 17045:tid 17045] [client 172.68.159.181:9869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.maffiniandbearce.com"] [uri "/.git/config"] [unique_id "avX_ujHDKukSSg0FGglYSgAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:21:31
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:21:22.841792 2026] [security2:error] [pid 8159:tid 8159] [client 172.68.159.181:11836] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:21:22.841792 2026] [security2:error] [pid 8159:tid 8159] [client 172.68.159.181:11836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ultratecnologia.com.mx"] [uri "/.git/config"] [unique_id "avXZckMIv8CA1OXDrLkoEAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 14:59:12
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:59:05.432706 2026] [security2:error] [pid 32720:tid 32720] [client 172.68.159.181:14285] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:59:05.432706 2026] [security2:error] [pid 32720:tid 32720] [client 172.68.159.181:14285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.southfloridachoppers.com"] [uri "/.git/HEAD"] [unique_id "avXUObeQhEgAOBDHUwORqQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 13:48:31
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:48:26.472052 2026] [security2:error] [pid 308:tid 308] [client 172.68.159.181:10894] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:48:26.472052 2026] [security2:error] [pid 308:tid 308] [client 172.68.159.181:10894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realjasonchance.com"] [uri "/.git/HEAD"] [unique_id "avXDqm4cVmLEshA7p7-IngAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-12 12:00:46
UTC ·
(2 days ago)
172.68.159.181 - - [12/Nov/2026:13:00:44 +0100] "GET /.git/config HTTP/1.1" 404 11848 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Brute-Force
Web App Attack
