🇺🇸
TPI-Abuse
2026-10-01 11:27:09
(9 minutes ago)
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 07:27:04.116058 2026] [security2:error] [pid 14278:tid 14278] [client 198.199.72.117:50692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emilyormen.com"] [uri "/.git/config"] [unique_id "ar5DiOIE4LXYkAWX_z5TywAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 09:53:19
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 05:53:13.511224 2026] [security2:error] [pid 17735:tid 17735] [client 198.199.72.117:54248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salazartransfers.com"] [uri "/.git/config"] [unique_id "ar4tiWlU87IpvVRTn0zhDAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 08:42:17
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 04:42:11.821960 2026] [security2:error] [pid 3968:tid 3968] [client 198.199.72.117:44236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerlinemagazine.com"] [uri "/.git/config"] [unique_id "ar4c4yXsXS23Y6awz1bizQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
webko.si
2026-10-01 08:27:33
(3 hours ago)
pridenmozic.si: Bruteforce web app access, URI detail: '/.git/config'.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 07:50:47
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 03:50:42.358252 2026] [security2:error] [pid 27451:tid 27451] [client 198.199.72.117:44474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renardpoche.com"] [uri "/.git/config"] [unique_id "ar4Q0ixEYVcuV7XGJx02iwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 07:29:08
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 03:29:02.647679 2026] [security2:error] [pid 10294:tid 10294] [client 198.199.72.117:57352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robcohn.com"] [uri "/.git/config"] [unique_id "ar4Lvj4abzn6LzoriGB7HAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 06:34:40
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 02:34:33.903461 2026] [security2:error] [pid 5211:tid 5211] [client 198.199.72.117:43640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seabreezeculvert.com"] [uri "/.git/config"] [unique_id "ar3--VQDMc45etw9rAEH7QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-01 06:30:08
(5 hours ago)
Web Server Exposed Git Repository Information Disclosure.
Hacking
🇺🇸
TPI-Abuse
2026-10-01 06:12:36
(5 hours ago)
(mod_security) mod_security (id:949110) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 02:12:32.202081 2026] [security2:error] [pid 23336:tid 23336] [client 198.199.72.117:50050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "radiographer.info"] [uri "/.git/config"] [unique_id "ar350L2eJo6ZBPA4wflAZAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 05:48:17
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 01:48:10.158294 2026] [security2:error] [pid 27092:tid 27092] [client 198.199.72.117:45690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homecheckinmaine.com"] [uri "/.git/config"] [unique_id "ar30Gio0ncNsSNRjYN-k0QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-01 05:29:14
(6 hours ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 198 ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 198.199.72.117 - - \[01/Oct/2026:07:29:03 +0200\] "GET /.git/config HTTP/1.1" 404 8025 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 05:12:09
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.72.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 01:12:03.651774 2026] [security2:error] [pid 19424:tid 19451] [client 198.199.72.117:43796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "poeticdialogues.com"] [uri "/.git/config"] [unique_id "ar3ro-ZF2HHwOIsE6CmrmQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-01 04:26:12
(7 hours ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 198.199.72.117 - - [01/Oct/2026:06:26:06 +0200] "GET /.git/config HTTP/1.1" 301 505 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-01 04:19:39
(7 hours ago)
Brute force
Brute-Force
