🇺🇸
TPI-Abuse
2026-08-29 05:45:09
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 01:44:59.853546 2026] [security2:error] [pid 16160:tid 16160] [client 172.69.223.75:12180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.corangues.com"] [uri "/.git/config"] [unique_id "apJx2xX87dlLruWqowMO6wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 01:57:11
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:57:05.230044 2026] [security2:error] [pid 282146:tid 282164] [client 172.69.223.75:12356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keetons.net.jameskeeton.com"] [uri "/.git/HEAD"] [unique_id "apI8cQNfDYkvhC1rmnp5pQAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 00:34:39
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:34:33.949715 2026] [security2:error] [pid 22532:tid 22532] [client 172.69.223.75:13643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cmexico.co"] [uri "/.git/config"] [unique_id "apIpGacQBBUNbwtI5GWPZgAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 11:53:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:53:34.229625 2026] [security2:error] [pid 6683:tid 6683] [client 172.69.223.75:11042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.littlestarbookspub.com"] [uri "/.git/config"] [unique_id "apF2vss3fR5N1as_58khMgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 10:01:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:01:45.969138 2026] [security2:error] [pid 27739:tid 27739] [client 172.69.223.75:9308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "no504.anthonyjoseph.us"] [uri "/.git/HEAD"] [unique_id "apFcib0igR6lJVBjzoa0IwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 07:50:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 03:50:53.001651 2026] [security2:error] [pid 9353:tid 9353] [client 172.69.223.75:13654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.curtsnet.com"] [uri "/.git/config"] [unique_id "apE93R4wsBq30VXZPPtt-QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 00:26:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 20:26:48.759446 2026] [security2:error] [pid 8593:tid 8593] [client 172.69.223.75:10552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "actionrev.mainstreetofficesuites.com"] [uri "/.git/HEAD"] [unique_id "apDVyKdOTcOo8qvmSRWkvAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 02:13:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 22:13:46.889029 2026] [security2:error] [pid 25706:tid 25706] [client 172.69.223.75:13065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.draindoctor.us"] [uri "/.git/config"] [unique_id "ao-dWi1ZFOuJ9k2YUqEOTQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-08-26 23:20:26
(2 days ago)
tcp/443 (5 or more attempts)
Port Scan
🇧🇪
voormedia
2026-08-26 21:24:44
(2 days ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 12:29:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 08:29:47.602278 2026] [security2:error] [pid 13316:tid 13316] [client 172.69.223.75:11023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.darnorb.com"] [uri "/.git/HEAD"] [unique_id "ao7cOxHn-Gq5MDilxFNILAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 10:32:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:32:49.067734 2026] [security2:error] [pid 8532:tid 8532] [client 172.69.223.75:9612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.adlc18.org"] [uri "/.git/config"] [unique_id "ao7A0a6X0wziTq5_10hNbwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 19:28:23
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:28:14.888961 2026] [security2:error] [pid 16889:tid 16889] [client 172.69.223.75:13757] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sunstrongmetal.com"] [uri "/.git/HEAD"] [unique_id "ao3szukWTfF8BcJUt2BkRQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 16:34:24
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:34:15.519359 2026] [security2:error] [pid 19971:tid 19971] [client 172.69.223.75:13870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.larsholm.com"] [uri "/.git/config"] [unique_id "ao3EBwkxcgPFq5blEXo3GAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 08:36:55
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:36:48.206530 2026] [security2:error] [pid 20358:tid 20358] [client 172.69.223.75:13522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.koswerks.net"] [uri "/.git/config"] [unique_id "ao1UIHdDj-xNJWBsE3iBbgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
