🇫🇷
Batz
2026-11-09 18:10:53
UTC ·
(54 minutes ago)
Automated, Web, Bot, hunting, for, hidden, .env, /, AI, API, Credentials
Port Scan
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:16:32
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:16:25.594318 2026] [security2:error] [pid 23487:tid 23487] [client 172.64.200.140:13273] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:16:25.594318 2026] [security2:error] [pid 23487:tid 23487] [client 172.64.200.140:13273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.bencramer.net"] [uri "/.git/config"] [unique_id "avHx2Yg0nWraBsY3BPP8MgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:44:54
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:44:51.415508 2026] [security2:error] [pid 3921:tid 4042] [client 172.64.200.140:9721] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:44:51.415508 2026] [security2:error] [pid 3921:tid 4042] [client 172.64.200.140:9721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cityofmiddleton.org"] [uri "/.git/config"] [unique_id "avHcY5ltsi_dY_3ARAjfFQAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:20:27
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:20:23.148873 2026] [security2:error] [pid 21568:tid 21568] [client 172.64.200.140:11568] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:20:23.148873 2026] [security2:error] [pid 21568:tid 21568] [client 172.64.200.140:11568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nihlabs.org"] [uri "/.git/HEAD"] [unique_id "avHIl7EQcHHsmq5OP-ZvCAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
billyw0nka
2026-11-09 11:34:01
UTC ·
(7 hours ago)
pattern: .git
Hacking
🇩🇪
Hary74656
2026-11-09 10:43:04
UTC ·
(8 hours ago)
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 172.64.200.140] [realclient 172.64.200.140] [09/Nov/2026:11:43:03 +0100] [vhost jellybox.aschi.at] 403 "GET /.git/HEAD HTTP/2.0"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:21:34
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:21:27.539640 2026] [security2:error] [pid 1047:tid 1047] [client 172.64.200.140:12800] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:21:27.539640 2026] [security2:error] [pid 1047:tid 1047] [client 172.64.200.140:12800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.elessenux.com"] [uri "/.git/config"] [unique_id "avGQlzE02Ba_2oWGl0lC9AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:02:56
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:02:51.014088 2026] [security2:error] [pid 22935:tid 22935] [client 172.64.200.140:11028] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:02:51.014088 2026] [security2:error] [pid 22935:tid 22935] [client 172.64.200.140:11028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginiatouchatruck.com.joshuashands.org"] [uri "/.git/HEAD"] [unique_id "avGMOwZY6V3o1ssb-i09zwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:13:25
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:13:20.408235 2026] [security2:error] [pid 15160:tid 15160] [client 172.64.200.140:10521] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:13:20.408235 2026] [security2:error] [pid 15160:tid 15160] [client 172.64.200.140:10521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accordionstars.com.accordionclub.org"] [uri "/.git/config"] [unique_id "avGAoEBvPSjo9BVwJ3LKDwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:09:56
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:09:52.859390 2026] [security2:error] [pid 23669:tid 23669] [client 172.64.200.140:11238] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:09:52.859390 2026] [security2:error] [pid 23669:tid 23669] [client 172.64.200.140:11238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmersmutualcallaway.com"] [uri "/.git/config"] [unique_id "avFxwN-fjNCsvNx2AqA-zwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sternwart
2026-11-09 06:35:24
UTC ·
(12 hours ago)
Automatisch erkannt: Zugriff auf /.git/config (storify-stage.alpasana.ch)
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-09 06:28:51
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:28:47.280092 2026] [security2:error] [pid 13875:tid 13875] [client 172.64.200.140:10096] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:28:47.280092 2026] [security2:error] [pid 13875:tid 13875] [client 172.64.200.140:10096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rotorservice.com"] [uri "/.git/config"] [unique_id "avFoH_KoiSmK-X42jvquFgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
pixiekat
2026-11-09 05:15:43
UTC ·
(13 hours ago)
Banned by fail2ban (modsec-tripwire, 1 hits) [msg "no source code for you"]
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-09 04:32:24
UTC ·
(14 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T04:30:01.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:29:05
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:28:56.600643 2026] [security2:error] [pid 32679:tid 32679] [client 172.64.200.140:12162] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:28:56.600643 2026] [security2:error] [pid 32679:tid 32679] [client 172.64.200.140:12162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cthog.xyz"] [uri "/.git/HEAD"] [unique_id "avFMCD_-ueb_Y_I4mejk8AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
