🇺🇸
TPI-Abuse
2026-11-12 15:04:10
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:04:03.621657 2026] [security2:error] [pid 2597:tid 2597] [client 172.69.155.25:12767] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:04:03.621657 2026] [security2:error] [pid 2597:tid 2597] [client 172.69.155.25:12767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bigredgraphicdesign.com"] [uri "/.git/config"] [unique_id "avXVY2U74t9TFg-h77DsEAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-12 07:03:18
UTC ·
(9 hours ago)
172.69.155.25 - - [12/Nov/2026:07:03:17 +0000] "GET /.git/config HTTP/2.0" 302 377 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 01:00:52
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:00:46.057724 2026] [security2:error] [pid 10852:tid 10852] [client 172.69.155.25:14327] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:00:46.057724 2026] [security2:error] [pid 10852:tid 10852] [client 172.69.155.25:14327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theraband.chevronparkett.com"] [uri "/.git/HEAD"] [unique_id "avUPvitWIWZEz6u94v0CYwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:34:09
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:34:03.686829 2026] [security2:error] [pid 11392:tid 11392] [client 172.69.155.25:10251] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:34:03.686829 2026] [security2:error] [pid 11392:tid 11392] [client 172.69.155.25:10251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iplantotravel.com"] [uri "/.git/config"] [unique_id "avTROyiNh3KScpWN3kqHEgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-11 13:06:09
UTC ·
(1 day ago)
Trying to access config files
Web App Attack
🇳🇱
Alt255
2026-11-10 14:54:33
UTC ·
(2 days ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.69.155.25 - - [10/Nov/2026:15:54:21 +0100] "GET /.git/HEAD HTTP/2.0" 404 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.69.155.25 - - [10/Nov/2026:15:54:21 +0100] "GET /.git/HEAD HTTP/2.0" 404 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:28:58
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:28:51.462199 2026] [security2:error] [pid 10165:tid 10165] [client 172.69.155.25:11853] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:28:51.462199 2026] [security2:error] [pid 10165:tid 10165] [client 172.69.155.25:11853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zanussi.pamplonaserviciotecnico.com"] [uri "/.git/HEAD"] [unique_id "avLVwyqdYF87z-Kl7ZuX0AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:39:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:39:28.250374 2026] [security2:error] [pid 20627:tid 20627] [client 172.69.155.25:12691] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:39:28.250374 2026] [security2:error] [pid 20627:tid 20627] [client 172.69.155.25:12691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkoskieelectric.com"] [uri "/.git/HEAD"] [unique_id "avKD4Eb6N_FlaUxYaDzDGgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:56:08
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:56:04.820265 2026] [security2:error] [pid 32087:tid 32087] [client 172.69.155.25:12133] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:56:04.820265 2026] [security2:error] [pid 32087:tid 32087] [client 172.69.155.25:12133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coconut-homes.com"] [uri "/.git/HEAD"] [unique_id "avJ5tB5F5dLCPrV_L6IaXgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:37:46
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:37:40.174209 2026] [security2:error] [pid 21119:tid 21119] [client 172.69.155.25:10587] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:37:40.174209 2026] [security2:error] [pid 21119:tid 21119] [client 172.69.155.25:10587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tedharris.com"] [uri "/.git/HEAD"] [unique_id "avJ1ZHz6PIkkTQWMAAB0fAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mishan
2026-11-09 23:14:11
UTC ·
(2 days ago)
172.69.155.25 - - [09/Nov/2026:15:14:10 -0800] "GET /.git/config HTTP/1.1" 200 720634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Web App Attack
🇮🇹
CoreTech srl
2026-11-09 19:58:56
UTC ·
(2 days ago)
cloudlinux2 fail2ban: 2026-11-09 20:53:49,962 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 120.219.77.64 - 2026-11-09 20:53:49cloudlinux2 fail2ban: 2026-11-09 20:54:36,040 fail2ban.filter [1667]: INFO [plesk-wordpress] ...
show more
cloudlinux2 fail2ban: 2026-11-09 20:53:49,962 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 120.219.77.64 - 2026-11-09 20:53:49cloudlinux2 fail2ban: 2026-11-09 20:54:36,040 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 45.70.198.52 - 2026-11-09 20:54:35cloudlinux2 fail2ban: 2026-11-09 20:55:08,503 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 172.69.155.25 - 2026-11-09 20:55:08cloudlinux2 fail2ban: 2026-11-09 20:55:08,491 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 172.69.155.33 - 2026-11-09 20:55:08cloudlinux2 fail2ban: 2026-11-09 20:55:30,717 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 136.144.42.89 - 2026-11-09 20:55:30cloudlinux2 fail2ban: 2026-11-09 20:55:26,221 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 136.144.42.89 - 2026-11-09 20:55:25cloudlinux2 fail2ban: 2026-11-09 20:55:46,727 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 193.36.224.62 - 2026-11-09 20:55:46clou
show less
Web App Attack
🇩🇪
altenglaner
2026-11-09 18:35:52
UTC ·
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:29:45
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:29:38.771945 2026] [security2:error] [pid 9901:tid 9901] [client 172.69.155.25:12645] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:29:38.771945 2026] [security2:error] [pid 9901:tid 9901] [client 172.69.155.25:12645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.stationrestaurant.ca"] [uri "/.git/HEAD"] [unique_id "avHm4ky_-QittzCWb5zjswAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-11-09 14:59:34
UTC ·
(3 days ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack