🇺🇸
TPI-Abuse
2026-11-11 06:16:29
UTC ·
(8 minutes ago)
(mod_security) mod_security (id:210492) triggered by 144.172.110.67 (67.110.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:16:23.329742 2026] [security2:error] [pid 2379:tid 2379] ...
show more
(mod_security) mod_security (id:210492) triggered by 144.172.110.67 (67.110.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 01:16:23.329742 2026] [security2:error] [pid 2379:tid 2379] [client 144.172.110.67:57954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehandyfamily.net"] [uri "/.git/config"] [unique_id "avQINxjbrd7tp9Yf4huvlwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇳
soporte
2026-11-11 06:12:08
UTC ·
(12 minutes ago)
Probe for vulnerabilities. Path attempted: /.git/config
Web App Attack
🇵🇱
Budyn
2026-11-11 06:02:16
UTC ·
(22 minutes ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: status.teddypot.store | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) | Re ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: status.teddypot.store | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇺🇸
Blamdom
2026-11-11 05:57:27
UTC ·
(27 minutes ago)
Secret/config-file recon: requested /.git/config. 1 HTTP request(s), 2026-11-11 05:57:27 UTC.
Requests (method path -> status xcount):
GET /.git/config -> 404
UA: Mozilla/5.0 (X11; Linux x86_64)
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-11-11 05:55:18
UTC ·
(29 minutes ago)
Blocked by firewall on hugin [443/tcp] | Rule: AbuseIPDB | SPT: 37930 | TTL: 64 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇬🇧
seniorlinuxadmin
2026-11-11 05:49:43
UTC ·
(34 minutes ago)
144.172.110.67 - - [11/Nov/2026:05:49:42 +0000] "GET /.git/config HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64)"
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 05:46:32
UTC ·
(38 minutes ago)
(mod_security) mod_security (id:210492) triggered by 144.172.110.67 (67.110.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:46:26.701163 2026] [security2:error] [pid 10193:tid 1019 ...
show more
(mod_security) mod_security (id:210492) triggered by 144.172.110.67 (67.110.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:46:26.701163 2026] [security2:error] [pid 10193:tid 10193] [client 144.172.110.67:54430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sb-adventures.com"] [uri "/.git/config"] [unique_id "avQBMs9Upmga_YrHa695qQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Sakusen
2026-11-11 05:09:00
UTC ·
(1 hour ago)
Automated web attack: 3 reqs, 1 paths probed, 3 returned 404; probed: 1 .git
Hacking
Web App Attack
🇮🇩
Burayot
2026-11-11 05:07:59
UTC ·
(1 hour ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 144.172.110.67 (US/United States/67.110.172.144.static.cloudzy.com): 1 in the last 3600 secs
Web App Attack
🇺🇸
Choice Tech LLC
2026-11-11 05:05:04
UTC ·
(1 hour ago)
Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-11-11 05:02:11
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 144.172.110.67 (67.110.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:02:06.925060 2026] [security2:error] [pid 13827:tid 1382 ...
show more
(mod_security) mod_security (id:210492) triggered by 144.172.110.67 (67.110.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:02:06.925060 2026] [security2:error] [pid 13827:tid 13827] [client 144.172.110.67:33028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pharmaceuticalsalescareerhub.com"] [uri "/.git/config"] [unique_id "avP2ziw7qFxiv783vNKw6wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-11-11 04:50:09
UTC ·
(1 hour ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-11-11 04:45:27
UTC ·
(1 hour ago)
Scan for .git Files at 2026-11-11T04:45:27+00:00
Web App Attack
🇩🇪
yitzhaq
2026-11-11 04:39:07
UTC ·
(1 hour ago)
144.172.110.67 - - [11/Nov/2026:05:38:59 +0100] "GET /.git/config HTTP/1.1" 403 4431 "-" "Mozilla/5.0 (X11; Linux x86_64)"
144.172.110.67 - - [11/Nov/2026:05:39:01 +0100] "GET /.git/config HTTP/1.1" 403 4452 "-" "Mozilla/5.0 (X11; Linux x86_64)"
144. ...
show more
144.172.110.67 - - [11/Nov/2026:05:38:59 +0100] "GET /.git/config HTTP/1.1" 403 4431 "-" "Mozilla/5.0 (X11; Linux x86_64)"
144.172.110.67 - - [11/Nov/2026:05:39:01 +0100] "GET /.git/config HTTP/1.1" 403 4452 "-" "Mozilla/5.0 (X11; Linux x86_64)"
144.172.110.67 - - [11/Nov/2026:05:39:03 +0100] "GET /.git/config HTTP/1.1" 403 4466 "-" "Mozilla/5.0 (X11; Linux x86_64)"
show less
Web App Attack
Hacking
🇦🇺
Klaverstyn
2026-11-11 04:38:59
UTC ·
(1 hour ago)
Excessive HTTP request rate
Web App Attack