🇺🇸
TPI-Abuse
2026-11-14 16:06:39
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:06:34.800558 2026] [security2:error] [pid 31702:tid 31702] [client 172.68.159.31:9465] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:06:34.800558 2026] [security2:error] [pid 31702:tid 31702] [client 172.68.159.31:9465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blessedhavenfarm.com"] [uri "/.git/config"] [unique_id "aviHCk7nOqtO1GIsxdHfMQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 15:36:34
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:36:30.593948 2026] [security2:error] [pid 21796:tid 21796] [client 172.68.159.31:14330] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:36:30.593948 2026] [security2:error] [pid 21796:tid 21796] [client 172.68.159.31:14330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prcomputersolutions.com"] [uri "/.git/HEAD"] [unique_id "avh__qdyAIlj0iQ0rihHGgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 14:30:49
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:30:46.134644 2026] [security2:error] [pid 2881:tid 2881] [client 172.68.159.31:9758] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:30:46.134644 2026] [security2:error] [pid 2881:tid 2881] [client 172.68.159.31:9758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oximoron.com"] [uri "/.git/HEAD"] [unique_id "avhwlsdmPoENLvV8NFMCvgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:29:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:29:00.314814 2026] [security2:error] [pid 21697:tid 21697] [client 172.68.159.31:14169] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:29:00.314814 2026] [security2:error] [pid 21697:tid 21697] [client 172.68.159.31:14169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rockhillcounselors.com"] [uri "/.git/config"] [unique_id "avXbPP2DKWMnbAbDPSQSUQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-11-09 17:38:23
UTC ·
(5 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:21:49
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:21:43.005870 2026] [security2:error] [pid 28850:tid 28850] [client 172.68.159.31:11737] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:21:43.005870 2026] [security2:error] [pid 28850:tid 28850] [client 172.68.159.31:11737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.celebrateadoption.taltonfamily.com"] [uri "/.git/HEAD"] [unique_id "avHzFwinjeCu2AIGEF96WQAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:34:48
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:34:43.080840 2026] [security2:error] [pid 15726:tid 15726] [client 172.68.159.31:9702] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:34:43.080840 2026] [security2:error] [pid 15726:tid 15726] [client 172.68.159.31:9702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wcsystems.net"] [uri "/.git/HEAD"] [unique_id "avGv06LaSTN1wAof9hW4lwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:15:39
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:15:31.585723 2026] [security2:error] [pid 14615:tid 14636] [client 172.68.159.31:9277] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:15:31.585723 2026] [security2:error] [pid 14615:tid 14636] [client 172.68.159.31:9277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "titanweb.com.appraisalteam.net"] [uri "/.git/HEAD"] [unique_id "avGrU1er5Cpvzo7LRfqpmwAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-05 15:31:38
UTC ·
(1 week ago)
Web App Attack
🇭🇺
bcsaba
2026-11-04 17:55:25
UTC ·
(1 week ago)
Probing for .git:
172.68.159.31 - - [04/Nov/2026:18:55:22 +0100] "GET /.git/config HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 04:39:02
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:38:56.145398 2026] [security2:error] [pid 16608:tid 16608] [client 172.68.159.31:13964] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:38:56.145398 2026] [security2:error] [pid 16608:tid 16608] [client 172.68.159.31:13964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sco-ot.softwarezz.net"] [uri "/.git/config"] [unique_id "auq24E1hkMWzMPRz3K4lRAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 01:49:15
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:49:08.071463 2026] [security2:error] [pid 21916:tid 21916] [client 172.68.159.31:10008] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:49:08.071463 2026] [security2:error] [pid 21916:tid 21916] [client 172.68.159.31:10008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pronio.com"] [uri "/.git/config"] [unique_id "aufsFB3ovDeM2_VNt68rqwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 01:09:23
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:09:16.071601 2026] [security2:error] [pid 14567:tid 14567] [client 172.68.159.31:10565] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:09:16.071601 2026] [security2:error] [pid 14567:tid 14567] [client 172.68.159.31:10565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "everpickon.chevronparkett.com"] [uri "/.git/config"] [unique_id "aufivKjCpLJWx2gvi2kbOQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-01 08:07:00
UTC ·
(1 week ago)
IP matched detection query 404 icewarp.
Brute-Force
Hacking
🇺🇸
TPI-Abuse
2026-11-01 05:57:49
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:57:43.893349 2026] [security2:error] [pid 24377:tid 24377] [client 172.68.159.31:13597] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:57:43.893349 2026] [security2:error] [pid 24377:tid 24377] [client 172.68.159.31:13597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "player-care.player-care.com"] [uri "/.git/config"] [unique_id "aubU19Rbfz8neOWVzv0v-wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
