🇳🇱
Alt255
2026-11-15 01:04:11
UTC ·
(17 hours ago)
[mx01aln] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.69.155.225 - - [15/Nov/2026:02:03:50 +0100] "GET /.git/HEAD HTTP/2.0" 301 502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ...
show more
[mx01aln] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.69.155.225 - - [15/Nov/2026:02:03:50 +0100] "GET /.git/HEAD HTTP/2.0" 301 502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
172.69.155.225 - - [15/Nov/2026:02:03:50 +0100] "GET /.git/config HTTP/2.0" 301 506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 23:53:49
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:53:43.651130 2026] [security2:error] [pid 20887:tid 20887] [client 172.69.155.225:13574] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:53:43.651130 2026] [security2:error] [pid 20887:tid 20887] [client 172.69.155.225:13574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theamarals.com"] [uri "/.git/HEAD"] [unique_id "avj0h45zDwBQmkBr7KlppgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-14 17:52:28
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 13:44:24
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:44:19.925776 2026] [security2:error] [pid 1188584:tid 1188584] [client 172.69.155.225:11 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:44:19.925776 2026] [security2:error] [pid 1188584:tid 1188584] [client 172.69.155.225:11801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solbrella.com"] [uri "/.git/HEAD"] [unique_id "avhls9Rc3dPD8eznnLkthAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 12:50:29
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:50:23.706069 2026] [security2:error] [pid 19312:tid 19312] [client 172.69.155.225:12492] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:50:23.706069 2026] [security2:error] [pid 19312:tid 19312] [client 172.69.155.225:12492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buildpower.com"] [uri "/.git/HEAD"] [unique_id "avhZDwMgw9miONmpeIKTKgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-11-14 10:50:11
UTC ·
(1 day ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇪🇸
Gem
2026-11-13 23:07:23
UTC ·
(1 day ago)
Unauthorized web scan.
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-13 22:53:06
UTC ·
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇭🇺
bcsaba
2026-11-13 16:29:25
UTC ·
(2 days ago)
Probing for .git:
172.69.155.225 - - [13/Nov/2026:16:45:08 +0100] "GET /.git/HEAD HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
Anonymous
2026-11-13 15:54:46
UTC ·
(2 days ago)
GET /.git/HEAD HTTP/1.1
...
Web App Attack
🇩🇪
altenglaner
2026-11-13 13:24:22
UTC ·
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:34:21
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:34:15.625630 2026] [security2:error] [pid 16493:tid 16522] [client 172.69.155.225:14178] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:34:15.625630 2026] [security2:error] [pid 16493:tid 16522] [client 172.69.155.225:14178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaukabsiddique.newtrendmag.org"] [uri "/.git/config"] [unique_id "avbnpzwcM1EWD9vivts7dAAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-11-13 07:08:59
UTC ·
(2 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇫🇮
cleverest.eu
2026-11-13 06:52:19
UTC ·
(2 days ago)
MimirWAF has 2 incidents from 1 distinct domain => {"bad_request_uri / vcs_probe"}
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:12:09
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:12:01.386278 2026] [security2:error] [pid 15149:tid 15149] [client 172.69.155.225:12575] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:12:01.386278 2026] [security2:error] [pid 15149:tid 15149] [client 172.69.155.225:12575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jonrcortright.com"] [uri "/.git/HEAD"] [unique_id "avXXQczSLwgI53Ieu6IsmAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack