๐ณ๐ฑ
e.fierstra
2026-10-13 08:24:10
(7 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-13 07:50:02
(8 hours ago)
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 107.175.65.77 - - [13/Oct/2026:09:49:41 +0200] "GET /.git/HEAD HTTP/1.1" 302 7357 "-" "Python-urllib/3.10"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 08:35:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:35:10.976216 2026] [security2:error] [pid 14666:tid 14949] [client 107.175.65.77:57548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mentzlaw.com"] [uri "/.git/HEAD"] [unique_id "asybvq8t-KWUSGibjQD2cQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 08:08:00
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:07:55.187443 2026] [security2:error] [pid 16204:tid 16204] [client 107.175.65.77:60910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.menagri.com"] [uri "/.git/HEAD"] [unique_id "asyVW29LhcoEHP5MZtz00QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 06:28:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 02:28:52.831550 2026] [security2:error] [pid 1909:tid 1909] [client 107.175.65.77:36229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.carlosmol.com"] [uri "/.git/HEAD"] [unique_id "asx-JNPlhXfB2EZL2AiFgwAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 06:09:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 02:09:49.898096 2026] [security2:error] [pid 12884:tid 12928] [client 107.175.65.77:46565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cargostuff.com"] [uri "/.git/HEAD"] [unique_id "asx5re2AggdAfv_Za76trwAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 05:32:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 01:32:30.880038 2026] [security2:error] [pid 7127:tid 7127] [client 107.175.65.77:35960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.caralis.com"] [uri "/.git/HEAD"] [unique_id "asxw7hySQ8jsc7rQD1ztzgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-10-11 17:34:58
(1 day ago)
[SunOct1119:34:51.3013062026][security2:error][pid1516098:tid1516195][client107.175.65.77:0]ModSecur ...
show more
[SunOct1119:34:51.3013062026][security2:error][pid1516098:tid1516195][client107.175.65.77:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.hosting-ticino-svizzera.com\"][uri\"/.git/HEAD\"][unique_id\"asvIuzr3OrSDBKhP9WhyNgAAAMU\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 12:57:41
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 08:57:36.541910 2026] [security2:error] [pid 25617:tid 25617] [client 107.175.65.77:35533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wastetrack.io"] [uri "/.git/HEAD"] [unique_id "asuHwL21BDgFJFXsWeVRRgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 08:46:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 04:46:37.055225 2026] [security2:error] [pid 30120:tid 30120] [client 107.175.65.77:56886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.teleplussolutions.com"] [uri "/.git/HEAD"] [unique_id "astM7X9MvlqG1ot40fV8PwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 07:51:14
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:50:54.246313 2026] [security2:error] [pid 20940:tid 20940] [client 107.175.65.77:41255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canadagreenrecycling.mapleleaf-marketing.com"] [uri "/.git/HEAD"] [unique_id "ass_3qXeqdf0qUgN7OjNiAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-09 15:49:13
(4 days ago)
[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 107.175.65.77 - - [09/Oct/2026:17:48:54 +0200] "GET /.git/HEAD HTTP/1.1" 403 7455 "-" "Python-urllib/3.10"
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
pinguin
2026-10-09 07:15:16
(4 days ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/HEAD
UA: Python-urllib/3.10
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-08 00:40:24
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 20:40:19.101253 2026] [security2:error] [pid 1876:tid 1876] [client 107.175.65.77:40385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nnrentacar.com"] [uri "/.git/HEAD"] [unique_id "asbmc2Wtkfn6K92tNsFfXQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-07 18:45:29
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 107.175.65.77 (107-175-65-77-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 14:45:22.224264 2026] [security2:error] [pid 9365:tid 9365] [client 107.175.65.77:53214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mariedjones.com"] [uri "/.git/HEAD"] [unique_id "asaTQmnaKSWl750dzJyXyQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack