🇩🇪
Lino Project
2026-11-10 05:07:16
UTC ·
(4 hours ago)
172.64.200.151 - - [10/Nov/2026:06:07:14 +0100] "GET /.git/HEAD HTTP/2.0" 403 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sternwart
2026-11-10 02:02:21
UTC ·
(7 hours ago)
Automatisch erkannt: Zugriff auf /.git/config (projekttag.ch)
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-10 01:35:07
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:34:57.294511 2026] [security2:error] [pid 6573:tid 6573] [client 172.64.200.151:12166] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:34:57.294511 2026] [security2:error] [pid 6573:tid 6573] [client 172.64.200.151:12166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.spicerreport.com"] [uri "/.git/config"] [unique_id "avJ0weg4l2TzA9tyToQpEAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:20:31
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:20:24.530934 2026] [security2:error] [pid 4625:tid 4625] [client 172.64.200.151:10348] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:20:24.530934 2026] [security2:error] [pid 4625:tid 4625] [client 172.64.200.151:10348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radio.gisur.com"] [uri "/.git/config"] [unique_id "avJjSFxhAmsIsBOKWHOfLAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
pltcldvlpr
2026-11-09 23:44:19
UTC ·
(10 hours ago)
CMS/framework probe: 172.64.200.151 - - [10/Nov/2026:00:44:19 +0100] "GET /.git/config HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" asn=13335 org="Cloudflare, Inc." country=PL
...
Web App Attack
🇫🇷
pm33
2026-11-09 18:39:44
UTC ·
(15 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:59:13
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:59:10.438033 2026] [security2:error] [pid 13825:tid 13825] [client 172.64.200.151:11243] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:59:10.438033 2026] [security2:error] [pid 13825:tid 13825] [client 172.64.200.151:11243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ajdejano.janbloom-art.com"] [uri "/.git/config"] [unique_id "avH73hC2k2QczmNp2BT8mQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-09 15:19:07
UTC ·
(18 hours ago)
Scanning for exposed credentials and private keys.
Hacking
🇩🇪
altenglaner
2026-11-09 11:49:29
UTC ·
(22 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇮🇹
CoreTech srl
2026-11-09 11:28:14
UTC ·
(22 hours ago)
cloudlinux2 fail2ban: 2026-11-09 12:10:29,377 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 172.64.200.32 - 2026-11-09 12:10:29cloudlinux2 fail2ban: 2026-11-09 12:10:28,799 fail2ban.actions [1667]: NOTICE [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-11-09 12:10:29,377 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 172.64.200.32 - 2026-11-09 12:10:29cloudlinux2 fail2ban: 2026-11-09 12:10:28,799 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Unban 147.30.138.173cloudlinux2 fail2ban: 2026-11-09 12:10:29,391 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 172.64.200.151 - 2026-11-09 12:10:29cloudlinux2 fail2ban: 2026-11-09 12:10:35,016 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Unban 213.27.24.97cloudlinux2 fail2ban: 2026-11-09 12:10:55,251 fail2ban.filter [1667]: INFO [recidive] Found 104.155.226.21 - 2026-11-09 12:10:55cloudlinux2 fail2ban: 2026-11-09 12:10:54,906 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 104.155.226.21 - 2026-11-09 12:10:54cloudlinux2 fail2ban: 2026-11-09 12:10:55,126 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 104.155.226.21 - 2026-11-09 12:10:55cloudlinux2 fail2ban: 2026-11-09 12:10:54,53
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-11-09 11:26:21
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:26:16.031514 2026] [security2:error] [pid 20220:tid 20220] [client 172.64.200.151:12381] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:26:16.031514 2026] [security2:error] [pid 20220:tid 20220] [client 172.64.200.151:12381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.codeem.tremulant.com"] [uri "/.git/HEAD"] [unique_id "avGt2FASOMQ6jRuPiTd4ZQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
rellik
2026-11-09 09:30:00
UTC ·
(1 day ago)
Scanning Critical Directory, Potential Part of BotNet
Hacking
DDoS Attack
Web App Attack
🇩🇪
mxbl
2026-11-09 07:55:08
UTC ·
(1 day ago)
Scanning for CMS vulnerabilities on a non-CMS system: /.git/HEAD
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:49:21
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:49:14.755856 2026] [security2:error] [pid 13009:tid 13036] [client 172.64.200.151:14142] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:49:14.755856 2026] [security2:error] [pid 13009:tid 13036] [client 172.64.200.151:14142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cargosanibel.com"] [uri "/.git/config"] [unique_id "avFQymFjpQlJd_1gjF8ZGwAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:41:52
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:41:49.015822 2026] [security2:error] [pid 10917:tid 10917] [client 172.64.200.151:11305] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:41:49.015822 2026] [security2:error] [pid 10917:tid 10917] [client 172.64.200.151:11305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.johnrobinsonconsulting.com"] [uri "/.git/config"] [unique_id "avFA_UH-Cio4ZT3zh9pO9wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack