2026-11-11 07:16:06
UTC ·
(2 hours ago)
172.64.198.187 - - [11/Nov/2026:04:16:06 -0300] "GET /.git/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
🇧🇪
boxed-it
2026-11-11 06:03:23
UTC ·
(3 hours ago)
GET /.git/HEAD (Tarpitted for 18s, wasted 1.17kB)
Web App Attack
🇳🇴
jad-abuse
2026-11-10 20:38:16
UTC ·
(13 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
Web App Attack
🇩🇪
todix
2026-11-10 17:42:46
UTC ·
(16 hours ago)
"GET /.git/config HTTP/2.0" 403 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:33:36
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:33:30.809051 2026] [security2:error] [pid 18264:tid 18264] [client 172.64.198.187:14212] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:33:30.809051 2026] [security2:error] [pid 18264:tid 18264] [client 172.64.198.187:14212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hollywooddrummers.mikedeutsch.com"] [uri "/.git/HEAD"] [unique_id "avLIyplUBaS4zbGxQdK2uQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Mein-ChatServer
2026-11-10 05:39:59
UTC ·
(1 day ago)
172.64.198.187 - - [10/Nov/2026:06:39:58 +0100] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Hacking
🇺🇸
TPI-Abuse
2026-11-10 05:09:29
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:09:22.726807 2026] [security2:error] [pid 1595:tid 1595] [client 172.64.198.187:10374] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:09:22.726807 2026] [security2:error] [pid 1595:tid 1595] [client 172.64.198.187:10374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tonynvn.me"] [uri "/.git/config"] [unique_id "avKnAkl10YrzVKChgThrkQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:19:29
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:19:24.338908 2026] [security2:error] [pid 3269:tid 3269] [client 172.64.198.187:11621] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:19:24.338908 2026] [security2:error] [pid 3269:tid 3269] [client 172.64.198.187:11621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "orlando-windsor-villa.com"] [uri "/.git/config"] [unique_id "avKNPLZ1oXBYGou27ZrEcAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:51:44
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:51:40.913657 2026] [security2:error] [pid 20240:tid 20240] [client 172.64.198.187:13473] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:51:40.913657 2026] [security2:error] [pid 20240:tid 20240] [client 172.64.198.187:13473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dreamingofatlantis.com"] [uri "/.git/config"] [unique_id "avKGvOZsJaaLts54v3rvqgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:10:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:10:54.213759 2026] [security2:error] [pid 13418:tid 13418] [client 172.64.198.187:10354] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:10:54.213759 2026] [security2:error] [pid 13418:tid 13418] [client 172.64.198.187:10354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thrudheim.org"] [uri "/.git/HEAD"] [unique_id "avJvHn2wA9DgcGyxDhyIbQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:43:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:43:51.893077 2026] [security2:error] [pid 6765:tid 6765] [client 172.64.198.187:10740] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:43:51.893077 2026] [security2:error] [pid 6765:tid 6765] [client 172.64.198.187:10740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "denroydannursery.edgeimprov.com"] [uri "/.git/config"] [unique_id "avJoxwvDvESQOt_QjiitJwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-11-10 00:33:53
UTC ·
(1 day ago)
172.64.198.187 - - [10/Nov/2026:01:33:52 +0100] "GET /.git/config HTTP/1.1" 404 5665 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Port Scan
Brute-Force
🇫🇷
rellik
2026-11-09 16:48:00
UTC ·
(1 day ago)
Scanning Critical Directory, Potential Part of BotNet
Hacking
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:26:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:26:51.437081 2026] [security2:error] [pid 19059:tid 19059] [client 172.64.198.187:10364] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:26:51.437081 2026] [security2:error] [pid 19059:tid 19059] [client 172.64.198.187:10364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fatjesus.com"] [uri "/.git/config"] [unique_id "avH0S8Syn7vzA7FQsD07ZAAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:08:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:08:09.823158 2026] [security2:error] [pid 2365:tid 2365] [client 172.64.198.187:10805] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:08:09.823158 2026] [security2:error] [pid 2365:tid 2365] [client 172.64.198.187:10805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.tempsetters.com"] [uri "/.git/config"] [unique_id "avHTySx-jJQ30mZi2mVVXQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
