2026-11-10 11:26:07
UTC ·
(4 minutes ago)
Automated report (2026-11-10T19:26:07+08:00). Caught probing for exposed Git data.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:39:48
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:39:43.172695 2026] [security2:error] [pid 31699:tid 31699] [client 172.68.159.150:9829] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:39:43.172695 2026] [security2:error] [pid 31699:tid 31699] [client 172.68.159.150:9829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hal.dance"] [uri "/.git/HEAD"] [unique_id "avKD7zG4NpuJCaPLzuIRVwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-10 00:57:39
UTC ·
(10 hours ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.150 - - [10/Nov/2026:01:57:23 +0100] "GET /.git/HEAD HTTP/2.0" 404 4585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.150 - - [10/Nov/2026:01:57:23 +0100] "GET /.git/HEAD HTTP/2.0" 404 4585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-09 21:04:13
UTC ·
(14 hours ago)
"GET /.git/config HTTP/2.0" 403 278 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
lnklnx
2026-11-09 20:50:39
UTC ·
(14 hours ago)
nextcloud.lnklnx.com:443 172.68.159.150 - - [09/Nov/2026:14:50:32 -0600] "GET /.git/HEAD HTTP/1.1" 404 12587 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Web App Attack
🇮🇹
sentinel1
2026-11-09 19:57:58
UTC ·
(15 hours ago)
Sentinel: [Credential scan] status=403 [GET] directus.nexus-orbital.com/.git/HEAD -> 403
Web App Attack
🇩🇪
altenglaner
2026-11-09 19:16:52
UTC ·
(16 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇨🇭
ardoshipsquad
2026-11-09 18:59:04
UTC ·
(16 hours ago)
Web application attack (vulnerability scanning): 1 malicious requests within 30 minutes.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 17:03:03
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:03:00.156415 2026] [security2:error] [pid 23061:tid 23061] [client 172.68.159.150:13611] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:03:00.156415 2026] [security2:error] [pid 23061:tid 23061] [client 172.68.159.150:13611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wiknwax.com"] [uri "/.git/HEAD"] [unique_id "avH8xF90oj0ql7DYLC6YdgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:36:56
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:36:51.229314 2026] [security2:error] [pid 7614:tid 7614] [client 172.68.159.150:13591] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:36:51.229314 2026] [security2:error] [pid 7614:tid 7614] [client 172.68.159.150:13591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.integrityfsinc.com"] [uri "/.git/config"] [unique_id "avGwUx-aTEprkhXOEp2b-gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:01:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:01:11.495796 2026] [security2:error] [pid 7175:tid 7175] [client 172.68.159.150:9785] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:01:11.495796 2026] [security2:error] [pid 7175:tid 7175] [client 172.68.159.150:9785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.gesegurospma.com"] [uri "/.git/HEAD"] [unique_id "avGn97w00kg2cNBhD8GjuQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:13:09
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:13:01.982104 2026] [security2:error] [pid 17404:tid 17404] [client 172.68.159.150:10075] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:13:01.982104 2026] [security2:error] [pid 17404:tid 17404] [client 172.68.159.150:10075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radiofamilia.com.mx"] [uri "/.git/config"] [unique_id "avGcrVJD8IiHobtGghXbugAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:34:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:33:56.370853 2026] [security2:error] [pid 2975:tid 2975] [client 172.68.159.150:11485] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:33:56.370853 2026] [security2:error] [pid 2975:tid 2975] [client 172.68.159.150:11485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.maunakeavista.com"] [uri "/.git/HEAD"] [unique_id "avGThF3skJ3AmN7vWWKyWgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:52:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:52:38.692235 2026] [security2:error] [pid 30390:tid 30390] [client 172.68.159.150:14282] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:52:38.692235 2026] [security2:error] [pid 30390:tid 30390] [client 172.68.159.150:14282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "villamarehiltonhead.empoweruohio.org"] [uri "/.git/HEAD"] [unique_id "avFttlqCHlUrsdOciZWqgQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:58:14
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:58:08.033523 2026] [security2:error] [pid 32015:tid 32015] [client 172.68.159.150:9985] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:58:08.033523 2026] [security2:error] [pid 32015:tid 32015] [client 172.68.159.150:9985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drinktopit.sendalawyerletter.com"] [uri "/.git/config"] [unique_id "avFS4I2qO-Vwr3Iy-opepwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
