Anonymous
2026-09-17 13:15:35
(55 minutes ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-09-09 17:12:14
(1 week ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ฉ๐ช
4server
2026-08-29 08:58:55
(2 weeks ago)
[SatAug2910:58:50.5488712026][security2:error][pid3879178:tid3879234][client172.69.223.90:0]ModSecur ...
show more
[SatAug2910:58:50.5488712026][security2:error][pid3879178:tid3879234][client172.69.223.90:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.pytag.ch\"][uri\"/.git/config\"][unique_id\"apKfSvxBjh4LeeL9a2Ub3gAAAUs\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 18:16:19
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:16:15.530228 2026] [security2:error] [pid 16665:tid 16665] [client 172.69.223.90:10313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.minnig.net"] [uri "/.git/HEAD"] [unique_id "apHQbyLBvoj99MEqzMxYSgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 08:07:01
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 04:06:54.538308 2026] [security2:error] [pid 678:tid 678] [client 172.69.223.90:13055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.castagnino.com"] [uri "/.git/HEAD"] [unique_id "ao_wHl5j2hp3nQjI6SmqGAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 07:32:34
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 03:32:29.405452 2026] [security2:error] [pid 9886:tid 9899] [client 172.69.223.90:13084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.baronannaly.aafm.us"] [uri "/.git/config"] [unique_id "ao_oDWA0a7ihYkrRaOcIrAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 04:42:25
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 00:42:22.409761 2026] [security2:error] [pid 1512506:tid 1512528] [client 172.69.223.90:11519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.furball.co.uk"] [uri "/.git/HEAD"] [unique_id "ao_ALm4o2jv0_JwE14AWDQAAAdI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-08-26 12:13:17
(3 weeks ago)
[WedAug2614:13:15.1192162026][security2:error][pid3894631:tid3894650][client172.69.223.90:0]ModSecur ...
show more
[WedAug2614:13:15.1192162026][security2:error][pid3894631:tid3894650][client172.69.223.90:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.casacarmen.ch\"][uri\"/.git/HEAD\"][unique_id\"ao7YW0dsQvCv5W83hCO4dQAAAAY\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 01:08:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 21:08:18.896458 2026] [security2:error] [pid 21977:tid 21977] [client 172.69.223.90:10301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dustyscomputerservice.com"] [uri "/.git/config"] [unique_id "aozrAraAdp5r3RYS4OqUJwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 21:13:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 17:13:46.798743 2026] [security2:error] [pid 28531:tid 28531] [client 172.69.223.90:9472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crystalshealinglights.com.my-spec.com"] [uri "/.git/config"] [unique_id "aooRCoWjHIwfGKbvGXe7ngAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 19:39:53
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:39:44.456237 2026] [security2:error] [pid 6607:tid 6607] [client 172.69.223.90:12127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.haroturkiye.com"] [uri "/.git/HEAD"] [unique_id "aon7AHNrv8VaSh7hAulkxgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 06:10:33
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:10:27.590762 2026] [security2:error] [pid 618:tid 618] [client 172.69.223.90:10439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mscpc.seizetheseason.com"] [uri "/.git/HEAD"] [unique_id "aok9U-Gg9I0UdnHd4U6NjgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 02:49:09
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 22:49:06.471674 2026] [security2:error] [pid 12291:tid 12291] [client 172.69.223.90:10145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnen.org.sobhrach.com"] [uri "/.git/HEAD"] [unique_id "aokOIvJS8Ckm7BR84R1j1QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 01:53:48
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 21:53:41.373027 2026] [security2:error] [pid 27421:tid 27421] [client 172.69.223.90:12596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rongrapes.com"] [uri "/.git/HEAD"] [unique_id "aokBJR2MQZyvuwMly9VY4QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-21 23:24:42
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.223.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 19:24:36.267615 2026] [security2:error] [pid 5882:tid 5882] [client 172.69.223.90:13643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.anythingsoldworldwide.com"] [uri "/.git/config"] [unique_id "aojeNNelIPfy96uusjeqcgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack