2026-11-08 06:05:08
UTC ·
(1 hour ago)
172.64.198.219 - - [08/Nov/2026:07:05:08 +0100] "GET /.git/config HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇳🇴
jad-abuse
2026-11-08 05:13:59
UTC ·
(2 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:42:07
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:42:03.282228 2026] [security2:error] [pid 4641:tid 4641] [client 172.64.198.219:12381] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:42:03.282228 2026] [security2:error] [pid 4641:tid 4641] [client 172.64.198.219:12381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abstractorangemusic.com"] [uri "/.git/config"] [unique_id "au_vi_4LIQV9_bDtW-dC0gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:08:03
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:07:58.437816 2026] [security2:error] [pid 26364:tid 26364] [client 172.64.198.219:12386] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:07:58.437816 2026] [security2:error] [pid 26364:tid 26364] [client 172.64.198.219:12386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "premaindustrial.com"] [uri "/.git/HEAD"] [unique_id "au_njjetQTsViqYcSi1uCAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rip
2026-11-08 02:47:43
UTC ·
(4 hours ago)
Restricted File Access Attempts
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:00:28
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:00:23.876698 2026] [security2:error] [pid 16436:tid 16436] [client 172.64.198.219:9863] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:00:23.876698 2026] [security2:error] [pid 16436:tid 16436] [client 172.64.198.219:9863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.unwaved.com"] [uri "/.git/HEAD"] [unique_id "au_XtwH_MrNxcEmwvj800AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:15:31
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:15:27.412150 2026] [security2:error] [pid 16593:tid 16593] [client 172.64.198.219:12521] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:15:27.412150 2026] [security2:error] [pid 16593:tid 16593] [client 172.64.198.219:12521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dodgersboosterclub.com"] [uri "/.git/HEAD"] [unique_id "au_NL-tMn9nPbnaDKpoAvQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 00:01:12
UTC ·
(7 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 23:39:05
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:39:00.461460 2026] [security2:error] [pid 13020:tid 13020] [client 172.64.198.219:11722] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:39:00.461460 2026] [security2:error] [pid 13020:tid 13020] [client 172.64.198.219:11722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotpay.co"] [uri "/.git/config"] [unique_id "au-2lGYXdCaWSULRMkii-gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 03:46:04
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 22:45:57.809559 2026] [security2:error] [pid 30925:tid 30925] [client 172.64.198.219:13857] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 22:45:57.809559 2026] [security2:error] [pid 30925:tid 30925] [client 172.64.198.219:13857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.soleillavie.com"] [uri "/.git/config"] [unique_id "augHdQQ0nVZnxYJIIkqwggAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 08:25:58
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:25:53.970860 2026] [security2:error] [pid 1098:tid 1098] [client 172.64.198.219:11078] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:25:53.970860 2026] [security2:error] [pid 1098:tid 1098] [client 172.64.198.219:11078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watahdata.rotorservice.com"] [uri "/.git/HEAD"] [unique_id "aub3kSCAizjHJmNTqPmJOgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 05:44:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:44:52.703552 2026] [security2:error] [pid 24935:tid 24935] [client 172.64.198.219:9815] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:44:52.703552 2026] [security2:error] [pid 24935:tid 24935] [client 172.64.198.219:9815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.neathridge.com"] [uri "/.git/config"] [unique_id "aubR1BPD2f_jk0xFuxsr_wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 03:53:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 23:53:19.034550 2026] [security2:error] [pid 17690:tid 17690] [client 172.64.198.219:13261] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 23:53:19.034550 2026] [security2:error] [pid 17690:tid 17690] [client 172.64.198.219:13261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.utd.net"] [uri "/.git/HEAD"] [unique_id "at19L2lifQhwmFDQeDAUCQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-10-25 01:06:27
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T23:56:15.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 23:48:27
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:48:21.739494 2026] [security2:error] [pid 10446:tid 10446] [client 172.64.198.219:11561] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:48:21.739494 2026] [security2:error] [pid 10446:tid 10446] [client 172.64.198.219:11561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jackkerrigan.com"] [uri "/.git/config"] [unique_id "atlPRcXhmCkr9zJ1cXmQUwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
