🇳🇱
Alt255
2026-11-09 20:39:40
UTC ·
(5 minutes ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.253 - - [09/Nov/2026:21:39:38 +0100] "GET /.git/config HTTP/2.0" 404 80125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) G ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.253 - - [09/Nov/2026:21:39:38 +0100] "GET /.git/config HTTP/2.0" 404 80125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇸🇪
Juha Jurvanen
2026-11-09 18:35:49
UTC ·
(2 hours ago)
Blocked by Scantide Guard on HTTP. Rule: Immediate HTTP block: high-confidence web attack pattern matched '*/.git/config*'..
Brute-Force
🇧🇪
boxed-it
2026-11-09 16:23:53
UTC ·
(4 hours ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:59:44
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:59:38.314626 2026] [security2:error] [pid 10124:tid 10124] [client 162.158.172.253:9977 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:59:38.314626 2026] [security2:error] [pid 10124:tid 10124] [client 162.158.172.253:9977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.andysharp.com"] [uri "/.git/HEAD"] [unique_id "avHt6hk5rFB4kJsnJcNPoAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-11-09 14:53:08
UTC ·
(5 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.
Hacking
🇺🇸
TPI-Abuse
2026-11-09 14:27:02
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:26:58.764851 2026] [security2:error] [pid 3150:tid 3150] [client 162.158.172.253:9790] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:26:58.764851 2026] [security2:error] [pid 3150:tid 3150] [client 162.158.172.253:9790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ralphharris.org"] [uri "/.git/config"] [unique_id "avHYMr2j7FnQ0p8UO6QxhwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-09 13:42:32
UTC ·
(7 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
todix
2026-11-09 12:12:43
UTC ·
(8 hours ago)
"GET /.git/HEAD HTTP/1.1" 403 6543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:35:41
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:35:36.257517 2026] [security2:error] [pid 26101:tid 26101] [client 162.158.172.253:1330 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:35:36.257517 2026] [security2:error] [pid 26101:tid 26101] [client 162.158.172.253:13303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.landtug.com"] [uri "/.git/HEAD"] [unique_id "avGwCCswqzZO5irLN95V8QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-09 08:44:24
UTC ·
(12 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T08:41:40.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:20:19
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:20:10.343401 2026] [security2:error] [pid 20881:tid 20881] [client 162.158.172.253:1217 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:20:10.343401 2026] [security2:error] [pid 20881:tid 20881] [client 162.158.172.253:12178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.businessimagination.com"] [uri "/.git/HEAD"] [unique_id "avGCOkjPGFmlkE3vOYJ5FwAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:55:51
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:55:45.871287 2026] [security2:error] [pid 18167:tid 18167] [client 162.158.172.253:1163 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:55:45.871287 2026] [security2:error] [pid 18167:tid 18167] [client 162.158.172.253:11636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.nolafoodporn.com"] [uri "/.git/HEAD"] [unique_id "avF8gSkzzX5Q5qWyaAxBbQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:17:27
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:17:23.801249 2026] [security2:error] [pid 19324:tid 19324] [client 162.158.172.253:1009 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:17:23.801249 2026] [security2:error] [pid 19324:tid 19324] [client 162.158.172.253:10094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lahaciendaolivia.com"] [uri "/.git/config"] [unique_id "avFzgyQg-PEAAtPZUqcIXgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-09 06:10:40
UTC ·
(14 hours ago)
[09/Nov/2026:08:10:40 +0200] -- 162.158.172.253 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:29:34
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:29:30.014975 2026] [security2:error] [pid 22293:tid 22293] [client 162.158.172.253:1062 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:29:30.014975 2026] [security2:error] [pid 22293:tid 22293] [client 162.158.172.253:10621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.denroydannursery.edgeimprov.com"] [uri "/.git/HEAD"] [unique_id "avE-GtehZH_TSIvOLAXXnQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
