🇩🇪
Mein-ChatServer
2026-11-09 18:41:10
UTC ·
(1 hour ago)
172.64.198.48 - - [09/Nov/2026:19:41:09 +0100] "GET /.git/config HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Hacking
🇳🇴
jad-abuse
2026-11-09 18:13:21
UTC ·
(1 hour ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:11:15
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:11:07.647883 2026] [security2:error] [pid 18745:tid 18745] [client 172.64.198.48:10824] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:11:07.647883 2026] [security2:error] [pid 18745:tid 18745] [client 172.64.198.48:10824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.danged.com"] [uri "/.git/HEAD"] [unique_id "avHii-X83-yXYV9vVIxdBAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:16:10
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:16:04.278139 2026] [security2:error] [pid 10169:tid 10169] [client 172.64.198.48:12894] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:16:04.278139 2026] [security2:error] [pid 10169:tid 10169] [client 172.64.198.48:12894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.currency.ic1.biz"] [uri "/.git/config"] [unique_id "avHVpB-lpOQI-GnASFnMnAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:55:13
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:55:07.765743 2026] [security2:error] [pid 23356:tid 23356] [client 172.64.198.48:9352] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:55:07.765743 2026] [security2:error] [pid 23356:tid 23356] [client 172.64.198.48:9352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.buffaloweddingdeejay.com"] [uri "/.git/HEAD"] [unique_id "avHQu_unrHbuPj09B7V6xgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:40:21
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:40:13.518103 2026] [security2:error] [pid 771:tid 870] [client 172.64.198.48:13418] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:40:13.518103 2026] [security2:error] [pid 771:tid 870] [client 172.64.198.48:13418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.spectresails.com"] [uri "/.git/config"] [unique_id "avG_LUAxt0kq6O5yEdh8IwAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:08:18
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:08:11.254578 2026] [security2:error] [pid 22509:tid 22509] [client 172.64.198.48:11737] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:08:11.254578 2026] [security2:error] [pid 22509:tid 22509] [client 172.64.198.48:11737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "okaadmin.byles.net"] [uri "/.git/config"] [unique_id "avG3q63bUkCurLAp7c7rgwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:04:09
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:04:03.205520 2026] [security2:error] [pid 5238:tid 5238] [client 172.64.198.48:10386] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:04:03.205520 2026] [security2:error] [pid 5238:tid 5238] [client 172.64.198.48:10386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rdsparts.com"] [uri "/.git/config"] [unique_id "avGoow_rOqdeLCl0YRUXWgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:39:49
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:39:41.492507 2026] [security2:error] [pid 32077:tid 32077] [client 172.64.198.48:12040] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:39:41.492507 2026] [security2:error] [pid 32077:tid 32077] [client 172.64.198.48:12040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ohnosound.com"] [uri "/.git/config"] [unique_id "avGi7UhRK0JXQ5JlQF9bngAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
borbolla
2026-11-09 05:11:27
UTC ·
(14 hours ago)
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /.git/config HTTP/2.0"
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-08 17:24:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:24:33.959051 2026] [security2:error] [pid 2888:tid 2888] [client 172.64.198.48:12059] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:24:33.959051 2026] [security2:error] [pid 2888:tid 2888] [client 172.64.198.48:12059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.indie100.com"] [uri "/.git/HEAD"] [unique_id "avCwUaR8HRg1WcbHgllOVQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:47:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:47:11.624432 2026] [security2:error] [pid 21301:tid 21301] [client 172.64.198.48:13841] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:47:11.624432 2026] [security2:error] [pid 21301:tid 21301] [client 172.64.198.48:13841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theledman.rotarymagnetics.com"] [uri "/.git/config"] [unique_id "avCnj8lcgRvECp9MymjmUQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:59:24
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:59:17.074213 2026] [security2:error] [pid 25962:tid 25962] [client 172.64.198.48:12294] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:59:17.074213 2026] [security2:error] [pid 25962:tid 25962] [client 172.64.198.48:12294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "charts.bccworldmedia.com"] [uri "/.git/config"] [unique_id "avCcVYR3sW4GG1VljPXnPAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:57:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:57:54.199500 2026] [security2:error] [pid 27244:tid 27244] [client 172.64.198.48:12169] M ...
show more
(mod_security) mod_security (id:949110) triggered by 172.64.198.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:57:54.199500 2026] [security2:error] [pid 27244:tid 27244] [client 172.64.198.48:12169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "woodlandventures.com"] [uri "/.git/config"] [unique_id "au-s8lPQ_MxS4gEZeyFqtgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-05 16:32:38
UTC ·
(4 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
