🇧🇪
voormedia
2026-11-12 21:47:32
UTC ·
(1 hour ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:55:14
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:55:09.569562 2026] [security2:error] [pid 6649:tid 6649] [client 172.68.159.174:11446] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:55:09.569562 2026] [security2:error] [pid 6649:tid 6649] [client 172.68.159.174:11446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cmabiblequizzing.org"] [uri "/.git/HEAD"] [unique_id "avXhXTNVJrpsnw-8XvaxswAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:22:57
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:22:53.946096 2026] [security2:error] [pid 23821:tid 23821] [client 172.68.159.174:14237] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:22:53.946096 2026] [security2:error] [pid 23821:tid 23821] [client 172.68.159.174:14237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pdc14.com"] [uri "/.git/HEAD"] [unique_id "avVbPQGIh3g9Kn7jY390TQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 05:55:12
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:55:08.115932 2026] [security2:error] [pid 21118:tid 21118] [client 172.68.159.174:9555] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:55:08.115932 2026] [security2:error] [pid 21118:tid 21118] [client 172.68.159.174:9555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.usoilinc.com"] [uri "/.git/config"] [unique_id "avVUvINCfQRe4PXj6VfVewAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 05:35:46
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:35:39.092396 2026] [security2:error] [pid 15116:tid 15116] [client 172.68.159.174:12643] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:35:39.092396 2026] [security2:error] [pid 15116:tid 15116] [client 172.68.159.174:12643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.phenoxcaribbean.com"] [uri "/.git/HEAD"] [unique_id "avVQK356Jkl5iaV7DKMoqQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-12 00:52:31
UTC ·
(22 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇳🇴
jad-abuse
2026-11-11 23:13:03
UTC ·
(23 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:28:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:28:39.650960 2026] [security2:error] [pid 31236:tid 31236] [client 172.68.159.174:12085] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:28:39.650960 2026] [security2:error] [pid 31236:tid 31236] [client 172.68.159.174:12085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fedeoliva.com"] [uri "/.git/config"] [unique_id "avTeBywEV0gdqKQDZNZ6kAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 19:22:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:22:38.781424 2026] [security2:error] [pid 31868:tid 31868] [client 172.68.159.174:13902] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:22:38.781424 2026] [security2:error] [pid 31868:tid 31868] [client 172.68.159.174:13902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeromesupick.com"] [uri "/.git/HEAD"] [unique_id "avTAfnVTi5n8G_F3Bd8M8wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-11 12:49:24
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-11T12:46:56.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 11:15:41
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:15:38.050954 2026] [security2:error] [pid 16155:tid 16155] [client 172.68.159.174:12849] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:15:38.050954 2026] [security2:error] [pid 16155:tid 16155] [client 172.68.159.174:12849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.guardmagic.eu"] [uri "/.git/HEAD"] [unique_id "avROWlo-mFn_TylYSMSqxgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-10 21:40:40
UTC ·
(2 days ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.174 - - [10/Nov/2026:22:40:25 +0100] "GET /.git/config HTTP/2.0" 404 43086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0 ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.174 - - [10/Nov/2026:22:40:25 +0100] "GET /.git/config HTTP/2.0" 404 43086 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇮🇹
keope
2026-11-10 19:17:44
UTC ·
(2 days ago)
sentinel:unauthorized-access
Brute-Force
Hacking
🇺🇸
TPI-Abuse
2026-11-10 05:33:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:33:01.289155 2026] [security2:error] [pid 12643:tid 12643] [client 172.68.159.174:11004] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:33:01.289155 2026] [security2:error] [pid 12643:tid 12643] [client 172.68.159.174:11004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pelicancovecondo.com"] [uri "/.git/HEAD"] [unique_id "avKsjeTUF2LB06KcY4_-igAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:05:45
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:05:39.269070 2026] [security2:error] [pid 30265:tid 30265] [client 172.68.159.174:10424] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:05:39.269070 2026] [security2:error] [pid 30265:tid 30265] [client 172.68.159.174:10424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aquascapes.net"] [uri "/.git/config"] [unique_id "avKKA9Fq9bfHxFIo_ahFnAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
