🇺🇸
TPI-Abuse
2026-11-12 04:30:37
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:30:34.197120 2026] [security2:error] [pid 5673:tid 5673] [client 172.68.159.36:12168] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:30:34.197120 2026] [security2:error] [pid 5673:tid 5673] [client 172.68.159.36:12168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.10bestcountryclubs.com"] [uri "/.git/config"] [unique_id "avVA6nPJDh2ZGjLQL-MtcwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 00:49:17
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 19:49:13.610435 2026] [security2:error] [pid 15639:tid 15639] [client 172.68.159.36:11691] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 19:49:13.610435 2026] [security2:error] [pid 15639:tid 15639] [client 172.68.159.36:11691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.w-c-p-m.com"] [uri "/.git/HEAD"] [unique_id "avUNCX-79q9-7Hw11J41xgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 23:50:20
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:50:14.436915 2026] [security2:error] [pid 6086:tid 6086] [client 172.68.159.36:13510] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:50:14.436915 2026] [security2:error] [pid 6086:tid 6086] [client 172.68.159.36:13510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vitalitywebb.com"] [uri "/.git/HEAD"] [unique_id "avT_NihZP0xXudofY8k49gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:53:39
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:53:32.131077 2026] [security2:error] [pid 28574:tid 28574] [client 172.68.159.36:11154] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:53:32.131077 2026] [security2:error] [pid 28574:tid 28574] [client 172.68.159.36:11154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandhage.com"] [uri "/.git/HEAD"] [unique_id "avTj3BdPtOb8SlRRHQt_ygAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-10 17:26:05
UTC ·
(1 day ago)
GET /.git/HEAD HTTP/1.1
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:26:02
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:25:58.288706 2026] [security2:error] [pid 29990:tid 29990] [client 172.68.159.36:9444] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:25:58.288706 2026] [security2:error] [pid 29990:tid 29990] [client 172.68.159.36:9444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "murciafm.com"] [uri "/.git/HEAD"] [unique_id "avKAtrfZzOP6EAi9vbZMcwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-09 19:32:13
UTC ·
(2 days ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.36 - - [09/Nov/2026:20:32:02 +0100] "GET /.git/config HTTP/2.0" 403 1974 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.36 - - [09/Nov/2026:20:32:02 +0100] "GET /.git/config HTTP/2.0" 403 1974 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:01:31
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:01:24.518965 2026] [security2:error] [pid 5646:tid 5646] [client 172.68.159.36:14308] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:01:24.518965 2026] [security2:error] [pid 5646:tid 5646] [client 172.68.159.36:14308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sublimationconsultants.ipostsocialmedia.com"] [uri "/.git/config"] [unique_id "avENVAbrTL7HbniJ_gGXmAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 05:38:12
UTC ·
(4 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:52:33
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:52:28.763334 2026] [security2:error] [pid 11740:tid 11740] [client 172.68.159.36:13082] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:52:28.763334 2026] [security2:error] [pid 11740:tid 11740] [client 172.68.159.36:13082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timberwolf-construction.com"] [uri "/.git/config"] [unique_id "au_V3GIFr3K4sx5h9q9gxwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-07 23:41:26
UTC ·
(4 days ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.36 - - [08/Nov/2026:00:41:16 +0100] "GET /.git/HEAD HTTP/2.0" 301 487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.36 - - [08/Nov/2026:00:41:16 +0100] "GET /.git/HEAD HTTP/2.0" 301 487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-11-04 13:25:46
UTC ·
(1 week ago)
Scanner hitting /.git/HEAD on api.picsou.cloud (CLOUDFLARENET) — aaguard
Brute-Force
Port Scan
🇳🇱
homeshowdomain.nl
2026-10-26 22:59:31
UTC ·
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-10-26
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-24 06:30:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:29:54.332716 2026] [security2:error] [pid 10714:tid 10714] [client 172.68.159.36:14272] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:29:54.332716 2026] [security2:error] [pid 10714:tid 10714] [client 172.68.159.36:14272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aifactoid.com"] [uri "/.git/config"] [unique_id "atxQYmXAhPZB2nQ_aZZUXAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 22:21:52
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 18:21:48.450454 2026] [security2:error] [pid 13191:tid 13191] [client 172.68.159.36:10505] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 18:21:48.450454 2026] [security2:error] [pid 13191:tid 13191] [client 172.68.159.36:10505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "handyman911.batw.net"] [uri "/.git/config"] [unique_id "atvd_HHKYUuvAb-NAINglAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
