Anonymous
2026-06-22 14:20:10
(4 seconds ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-22 14:19:26
(48 seconds ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 10:19:20.285505 2026] [security2:error] [pid 19845:tid 19845] [client 158.51.126.144:58570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.spyasociados.com"] [uri "/.git/config"] [unique_id "ajlEaNRp03pkoFKr48wiSAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-22 01:06:54
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 21:06:47.338547 2026] [security2:error] [pid 27951:tid 27951] [client 158.51.126.144:40804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.spathia.projectthinkspot.com"] [uri "/.git/HEAD"] [unique_id "ajiKp-IgxbTERk4uphOKkgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 18:21:02
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 14:20:57.040166 2026] [security2:error] [pid 18386:tid 18386] [client 158.51.126.144:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southernbroadcast.com"] [uri "/.git/config"] [unique_id "ajgrif69Yvuw1VYn1Rp3xgAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Flo Flo
2026-06-21 04:46:52
(1 day ago)
158.51.126.144 - - - [21/Jun/2026:06:46:52 +0200] "wildcard.flad.xyz" "GET /.git/config HTTP/1.1" 44 ...
show more
158.51.126.144 - - - [21/Jun/2026:06:46:52 +0200] "wildcard.flad.xyz" "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 0.000
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 03:45:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 23:45:19.452046 2026] [security2:error] [pid 11037:tid 11037] [client 158.51.126.144:37966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whatifandwhynot.xyz"] [uri "/.git/config"] [unique_id "ajdeT2YuG-wRecc0tm3aLgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 02:08:02
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 22:07:56.792506 2026] [security2:error] [pid 24635:tid 24635] [client 158.51.126.144:56748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.xcengineering.xyz"] [uri "/.git/HEAD"] [unique_id "ajdHfMSbv7OafwwdIvk_UwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 01:23:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 21:23:44.488441 2026] [security2:error] [pid 8186:tid 8186] [client 158.51.126.144:56280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.carmel.xyz"] [uri "/.git/HEAD"] [unique_id "ajc9IM6Wu4jwQ55P18ii0gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-20 17:10:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 13:10:41.217633 2026] [security2:error] [pid 1389:tid 1389] [client 158.51.126.144:48388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taafe.xyz"] [uri "/.git/config"] [unique_id "ajbJkc5lTbUs4B8YNjfwcQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
websecuritylabs
2026-06-15 13:17:00
(1 week ago)
Web App Attack
Web App Attack
๐ซ๐ท
omartin
2026-06-14 11:24:12
(1 week ago)
Critical Vulnerability Scan detected
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 10:09:24
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 06:09:16.507430 2026] [security2:error] [pid 27186:tid 27186] [client 158.51.126.144:47836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proventransmission.com"] [uri "/.git/HEAD"] [unique_id "ai59zGjFB7BGaMgPtzMYaAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-14 09:50:28
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-14 09:33:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 05:32:58.272915 2026] [security2:error] [pid 6337:tid 6337] [client 158.51.126.144:57046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prot.gabosoftware.com"] [uri "/.git/config"] [unique_id "ai51SlXvVxfe0ldLkQRfewAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 09:01:41
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 158.51.126.144 (158.51.126.144.hostodo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 05:01:35.870222 2026] [security2:error] [pid 1923:tid 1923] [client 158.51.126.144:33264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prosucomexico.com"] [uri "/.git/config"] [unique_id "ai5t7-0qymECtyNbEAIlPAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack