2026-10-16 17:23:29
(17 hours ago)
GET /.git/HEAD HTTP/1.1
...
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 11:04:01
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:03:57.911276 2026] [security2:error] [pid 7293:tid 7293] [client 107.175.158.156:48137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.leothecolorman.com"] [uri "/.git/HEAD"] [unique_id "atIEnQue2gfxLpvZ0KvhPAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
service Informatique
2026-10-16 04:00:37
(1 day ago)
/.git
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:10:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:10:09.229732 2026] [security2:error] [pid 17094:tid 17094] [client 107.175.158.156:44117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mispar.solutions"] [uri "/.git/HEAD"] [unique_id "atDQsQXfNdaYT13tu79JPwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 08:56:41
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 04:56:30.912196 2026] [security2:error] [pid 16085:tid 16085] [client 107.175.158.156:37777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.timberwolf-construction.com"] [uri "/.git/HEAD"] [unique_id "as9Dvp_GIm0PNhGayVmVaQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 00:40:12
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:40:03.430227 2026] [security2:error] [pid 18279:tid 18279] [client 107.175.158.156:56557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tell-me-first.com"] [uri "/.git/HEAD"] [unique_id "as7PYw4YLvsWx1tXi0mqOAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-13 08:23:54
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-13 07:49:59
(4 days ago)
[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. E ...
show more
[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 107.175.158.156 - - [13/Oct/2026:09:49:41 +0200] "GET /.git/HEAD HTTP/1.1" 404 7405 "-" "Python-urllib/3.10"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 07:15:07
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 03:15:00.542406 2026] [security2:error] [pid 11060:tid 11060] [client 107.175.158.156:37472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.carterrose.com"] [uri "/.git/HEAD"] [unique_id "asyI9F8G26uTCz1lRAwqqgAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 22:09:36
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 18:09:29.348743 2026] [security2:error] [pid 14671:tid 14671] [client 107.175.158.156:48848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ballast-capital.com"] [uri "/.git/HEAD"] [unique_id "aswJGU1IHpgPGvN3Eim6wAAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 19:57:15
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 15:57:03.884036 2026] [security2:error] [pid 3922:tid 3922] [client 107.175.158.156:39733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abeltours.com"] [uri "/.git/HEAD"] [unique_id "asvqD-IYmwQSeWpYI5dP5wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:24:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:24:07.331506 2026] [security2:error] [pid 13649:tid 13649] [client 107.175.158.156:46417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.hotpay.co"] [uri "/.git/HEAD"] [unique_id "asfRt2cAi3Nnu_oQFNzPbQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 09:40:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 05:40:09.811873 2026] [security2:error] [pid 18126:tid 18126] [client 107.175.158.156:49325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nexthop.com"] [uri "/.git/HEAD"] [unique_id "asdk-fpMjpeWIxj8MXYJxAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-08 02:32:15
(1 week ago)
[ThuOct0804:32:09.3292162026][security2:error][pid1698583:tid1698606][client107.175.158.156:0]ModSec ...
show more
[ThuOct0804:32:09.3292162026][security2:error][pid1698583:tid1698606][client107.175.158.156:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.vivereiltrentino.it\"][uri\"/.git/HEAD\"][unique_id\"ascAqW8ObL9HMm8d7_OXLQAAAAk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 00:06:26
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.158.156 (107-175-158-156-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 20:06:22.257398 2026] [security2:error] [pid 14898:tid 14956] [client 107.175.158.156:47710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "illianaphotobooth.illianapartyrentals.com"] [uri "/.git/HEAD"] [unique_id "asbefp8Yl_hjJhCBsM8K7QAAAZg"]
show less
Brute-Force
Bad Web Bot
Web App Attack