🇮🇹
main.ows
2025-11-28 20:22:56
UTC ·
(11 months ago)
[28/Nov/2025:21:22:55.752191 +0100] aSoEnTIg7eRr4idDH3cvhQAAAEM 167.172.26.71 56156 217.61.13.167 7081
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 20:15:05
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:14:54.793701 2025] [security2:error] [pid 8971:tid 8971] [client 167.172.26.71:44882] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:14:54.793701 2025] [security2:error] [pid 8971:tid 8971] [client 167.172.26.71:44882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krukgpt.com"] [uri "/.git/config"] [unique_id "aSoCvi_aDOjeX4s3BcO_QQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sdos.es
2025-11-28 20:10:40
UTC ·
(11 months ago)
"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"
Web App Attack
🇺🇸
mnsf
2025-11-28 19:07:09
UTC ·
(11 months ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 18:57:19
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 13:57:11.298919 2025] [security2:error] [pid 18547:tid 18547] [client 167.172.26.71:41380] M ...
show more
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 13:57:11.298919 2025] [security2:error] [pid 18547:tid 18547] [client 167.172.26.71:41380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwtlaw.com"] [uri "/.git/config"] [unique_id "aSnwh3tI163vKYZB9OCZhQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DocNetzwerk
2025-11-28 18:35:50
UTC ·
(11 months ago)
(mod_security) mod_security triggered on hostname [redacted] 167.172.26.71 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2025-11-28 18:35:15
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 13:35:10.775800 2025] [security2:error] [pid 2036:tid 2036] [client 167.172.26.71:45202] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 13:35:10.775800 2025] [security2:error] [pid 2036:tid 2036] [client 167.172.26.71:45202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwijlen.com"] [uri "/.git/config"] [unique_id "aSnrXoyemqZipDSs9wMm7AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2025-11-28 18:28:24
UTC ·
(11 months ago)
Web vulnerability probing: /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 18:13:44
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 13:13:39.669154 2025] [security2:error] [pid 6470:tid 6470] [client 167.172.26.71:39870] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 13:13:39.669154 2025] [security2:error] [pid 6470:tid 6470] [client 167.172.26.71:39870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khurley.org"] [uri "/.git/config"] [unique_id "aSnmUwU4TLlCdv7VmNqvvAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 17:57:43
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:57:36.712228 2025] [security2:error] [pid 8831:tid 8831] [client 167.172.26.71:50368] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:57:36.712228 2025] [security2:error] [pid 8831:tid 8831] [client 167.172.26.71:50368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koswerks.net"] [uri "/.git/config"] [unique_id "aSnikCGrK5zmSh4EPf5IJQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 17:41:46
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:41:38.944416 2025] [security2:error] [pid 5409:tid 5409] [client 167.172.26.71:56222] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:41:38.944416 2025] [security2:error] [pid 5409:tid 5409] [client 167.172.26.71:56222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keithwatt.org"] [uri "/.git/config"] [unique_id "aSne0jVD0pzaE-sqEo3yZwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 17:24:38
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:24:31.175250 2025] [security2:error] [pid 11478:tid 11478] [client 167.172.26.71:57260] M ...
show more
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:24:31.175250 2025] [security2:error] [pid 11478:tid 11478] [client 167.172.26.71:57260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kofcasamblea442.org"] [uri "/.git/config"] [unique_id "aSnaz-CsgPWxLVrTdvcckAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-28 17:15:02
UTC ·
(11 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 17:03:51
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:03:47.479300 2025] [security2:error] [pid 32351:tid 32351] [client 167.172.26.71:55568] M ...
show more
(mod_security) mod_security (id:210492) triggered by 167.172.26.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 12:03:47.479300 2025] [security2:error] [pid 32351:tid 32351] [client 167.172.26.71:55568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kennedimoore.click"] [uri "/.git/config"] [unique_id "aSnV85Jh-Nkx0ynKZwSOPQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2025-11-28 16:43:56
UTC ·
(11 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack