🇩🇪
altenglaner
2026-11-14 17:23:46
UTC ·
(42 minutes ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 16:29:22
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:29:14.643762 2026] [security2:error] [pid 28531:tid 28681] [client 172.64.200.196:10438] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:29:14.643762 2026] [security2:error] [pid 28531:tid 28681] [client 172.64.200.196:10438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "registeredprojectmanager.com"] [uri "/.git/HEAD"] [unique_id "aviMWkLFsqx9A_90-cEifwAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-14 13:32:36
UTC ·
(4 hours ago)
Scanning for exposed credentials and private keys
Hacking
2026-11-14 06:08:34
UTC ·
(11 hours ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 05:30:20
UTC ·
(12 hours ago)
(mod_security) mod_security (id:949110) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:30:13.051393 2026] [security2:error] [pid 3212:tid 3212] [client 172.64.200.196:9770] Mo ...
show more
(mod_security) mod_security (id:949110) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:30:13.051393 2026] [security2:error] [pid 3212:tid 3212] [client 172.64.200.196:9770] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "akistech.com"] [uri "/.git/HEAD"] [unique_id "avfx5fJ-VnPN6IQcSEVUtQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-14 05:22:16
UTC ·
(12 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇩🇪
todix
2026-11-13 15:15:35
UTC ·
(1 day ago)
"GET /.git/HEAD HTTP/2.0" 403 274 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 11:26:50
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:26:44.566466 2026] [security2:error] [pid 14434:tid 14434] [client 172.64.200.196:9996] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:26:44.566466 2026] [security2:error] [pid 14434:tid 14434] [client 172.64.200.196:9996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.okeetokee.okeetokee.org"] [uri "/.git/config"] [unique_id "avbz9B1GXIKa4HqcPXWuEwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-12 20:06:09
UTC ·
(1 day ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:34:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:34:40.814905 2026] [security2:error] [pid 17815:tid 17815] [client 172.64.200.196:11146] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:34:40.814905 2026] [security2:error] [pid 17815:tid 17815] [client 172.64.200.196:11146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paardekooper.info"] [uri "/.git/HEAD"] [unique_id "avYU0MiLEnDGqUbx7DpRzgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-11-12 17:55:58
UTC ·
(2 days ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:55:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:55:04.850187 2026] [security2:error] [pid 24171:tid 24171] [client 172.64.200.196:10419] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:55:04.850187 2026] [security2:error] [pid 24171:tid 24171] [client 172.64.200.196:10419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.grupoimaginarte.com"] [uri "/.git/config"] [unique_id "avXhWPt9gY9yNn2_C-MA2wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-12 15:32:11
UTC ·
(2 days ago)
GET /.git/HEAD (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:13:00
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:12:54.367897 2026] [security2:error] [pid 32021:tid 32021] [client 172.64.200.196:13261] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:12:54.367897 2026] [security2:error] [pid 32021:tid 32021] [client 172.64.200.196:13261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hecticred.com"] [uri "/.git/config"] [unique_id "avXXdsYZBjUP70tX7KHTBQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 13:31:46
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:31:41.832076 2026] [security2:error] [pid 6041:tid 6041] [client 172.64.200.196:10041] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:31:41.832076 2026] [security2:error] [pid 6041:tid 6041] [client 172.64.200.196:10041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phoneresponse.com"] [uri "/.git/config"] [unique_id "avW_vb6q4xmPo8ojW3mh6AAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
