🇺🇸
TPI-Abuse
2026-11-12 11:43:55
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:43:48.499008 2026] [security2:error] [pid 22784:tid 22784] [client 172.69.155.228:14313] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:43:48.499008 2026] [security2:error] [pid 22784:tid 22784] [client 172.69.155.228:14313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medics-group.com"] [uri "/.git/HEAD"] [unique_id "avWmdOwx3AfS2nx3XQFEUAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-11-12 04:09:30
UTC ·
(10 hours ago)
.env scanning [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 01:22:21
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:22:17.044352 2026] [security2:error] [pid 11272:tid 11272] [client 172.69.155.228:9895] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:22:17.044352 2026] [security2:error] [pid 11272:tid 11272] [client 172.69.155.228:9895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.watonga.com"] [uri "/.git/config"] [unique_id "avUUyWHyENIGvcY2FoDbiwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:34:10
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:34:03.665028 2026] [security2:error] [pid 1518:tid 1518] [client 172.69.155.228:11996] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:34:03.665028 2026] [security2:error] [pid 1518:tid 1518] [client 172.69.155.228:11996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iplantotravel.com"] [uri "/.git/HEAD"] [unique_id "avTRO_luOpMEvok-O2byjgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-11 14:06:09
UTC ·
(1 day ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:53:30
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:53:23.956552 2026] [security2:error] [pid 16778:tid 16778] [client 172.69.155.228:9383] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:53:23.956552 2026] [security2:error] [pid 16778:tid 16778] [client 172.69.155.228:9383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gegraphics.biz"] [uri "/.git/HEAD"] [unique_id "avRzU5xxMJCfE9zyNVNYsgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mxbl
2026-11-11 13:50:02
UTC ·
(1 day ago)
Scanning for CMS vulnerabilities on a non-CMS system: /.git/HEAD
Web App Attack
🇮🇹
Inartis
2026-11-10 20:15:17
UTC ·
(1 day ago)
172.69.155.228 - - [10/Nov/2026:21:15:14 +0100] "GET /.git/config HTTP/1.1" 404 5702 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Port Scan
Brute-Force
🇧🇪
voormedia
2026-11-10 15:45:48
UTC ·
(1 day ago)
Accessed trap at '/.git/config'
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:16:24
UTC ·
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:16:19.858274 2026] [security2:error] [pid 20176:tid 20176] [client 172.69.155.228:10446] ...
show more
(mod_security) mod_security (id:949110) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:16:19.858274 2026] [security2:error] [pid 20176:tid 20176] [client 172.69.155.228:10446] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "toxicnation.org"] [uri "/.git/HEAD"] [unique_id "avKak_aDTSvhDw7JlcLGmgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:19:54
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:19:48.721979 2026] [security2:error] [pid 5071:tid 5071] [client 172.69.155.228:9677] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:19:48.721979 2026] [security2:error] [pid 5071:tid 5071] [client 172.69.155.228:9677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centrodentalsindolor.com"] [uri "/.git/config"] [unique_id "avJ_RCwLOOdlv_IPssJblAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-09 20:54:06
UTC ·
(2 days ago)
172.69.155.228 - - [09/Nov/2026:21:54:05 +0100] "GET /.git/config HTTP/2.0" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 20:32:21
UTC ·
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇩🇪
sternwart
2026-11-09 16:49:26
UTC ·
(2 days ago)
Automatisch erkannt: Zugriff auf /.git/config (coaching-planet.ch)
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-09 16:01:43
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:01:37.796082 2026] [security2:error] [pid 26959:tid 26959] [client 172.69.155.228:13046] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:01:37.796082 2026] [security2:error] [pid 26959:tid 26959] [client 172.69.155.228:13046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.amazingthailand.net"] [uri "/.git/HEAD"] [unique_id "avHuYRp6D7oKRoS20xsgPQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
