🇺🇸
TPI-Abuse
2026-11-08 16:56:38
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:56:35.077614 2026] [security2:error] [pid 14106:tid 14106] [client 172.64.198.62:9274] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:56:35.077614 2026] [security2:error] [pid 14106:tid 14106] [client 172.64.198.62:9274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skomax.com.alanmariotti.com"] [uri "/.git/HEAD"] [unique_id "avCpw0kq5ref7Yln6ngs4AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:31:44
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:31:38.837915 2026] [security2:error] [pid 26558:tid 26558] [client 172.64.198.62:14282] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:31:38.837915 2026] [security2:error] [pid 26558:tid 26558] [client 172.64.198.62:14282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.gapanda.com"] [uri "/.git/config"] [unique_id "avCj6lJlfRbwVVZ7n_od0wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:24:42
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:24:36.225990 2026] [security2:error] [pid 22895:tid 22895] [client 172.64.198.62:12700] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:24:36.225990 2026] [security2:error] [pid 22895:tid 22895] [client 172.64.198.62:12700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chasingtequila.digbie.com"] [uri "/.git/HEAD"] [unique_id "avCUNJ7eLvBSKrMTbfCtuQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-11-08 12:38:36
UTC ·
(8 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 10:43:16
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:43:11.513161 2026] [security2:error] [pid 16622:tid 16622] [client 172.64.198.62:11492] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:43:11.513161 2026] [security2:error] [pid 16622:tid 16622] [client 172.64.198.62:11492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homevalue.iainrealtor.com"] [uri "/.git/config"] [unique_id "avBSP46hO-yXopgQFDGRqAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-11-08 10:28:14
UTC ·
(10 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.
Hacking
🇺🇸
TPI-Abuse
2026-11-08 10:07:45
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:07:41.809243 2026] [security2:error] [pid 3832148:tid 3832205] [client 172.64.198.62:1374 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:07:41.809243 2026] [security2:error] [pid 3832148:tid 3832205] [client 172.64.198.62:13747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yourpersonalbusinessplan.teritemme.com"] [uri "/.git/config"] [unique_id "avBJ7VCKms5CCustS6CqUgAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-08 07:59:39
UTC ·
(13 hours ago)
[08/Nov/2026:09:58:14 +0200] -- 172.64.198.62 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 06:47:25
UTC ·
(14 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇳🇱
Joop
2026-11-08 06:39:14
UTC ·
(14 hours ago)
2026-11-08 07:39:11 +0200 s7 /.git/config
Web App Attack
🇫🇷
pm33
2026-11-08 05:42:37
UTC ·
(15 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇩🇪
todix
2026-11-08 04:45:57
UTC ·
(16 hours ago)
"GET /.git/HEAD HTTP/1.1" 403 6503 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:17:03
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:16:55.697799 2026] [security2:error] [pid 32545:tid 32545] [client 172.64.198.62:13082] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:16:55.697799 2026] [security2:error] [pid 32545:tid 32545] [client 172.64.198.62:13082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gizmolabs.net"] [uri "/.git/HEAD"] [unique_id "au_3twEhnJxtqGUzqtf5pQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:41:55
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:41:50.853821 2026] [security2:error] [pid 4584:tid 4584] [client 172.64.198.62:12867] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:41:50.853821 2026] [security2:error] [pid 4584:tid 4584] [client 172.64.198.62:12867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kletzer.com"] [uri "/.git/config"] [unique_id "au_vfqs7YfdUFQMgnqIG7AAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:56:37
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:56:30.306626 2026] [security2:error] [pid 571:tid 571] [client 172.64.198.62:10667] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:56:30.306626 2026] [security2:error] [pid 571:tid 571] [client 172.64.198.62:10667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laughingthunder.com"] [uri "/.git/config"] [unique_id "au_k3tFRIclUgO0keD3JuAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
