🇩🇪
thesimonmanuel
2026-11-14 16:29:50
UTC ·
(9 minutes ago)
172.69.155.37 - - [14/Nov/2026:21:59:48 +0530] "GET /.git/HEAD HTTP/2.0" 403 166 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "2a06:98c0:3600::103"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 15:45:57
UTC ·
(53 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:45:49.673730 2026] [security2:error] [pid 16855:tid 16855] [client 172.69.155.37:12543] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:45:49.673730 2026] [security2:error] [pid 16855:tid 16855] [client 172.69.155.37:12543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drumez.com"] [uri "/.git/HEAD"] [unique_id "aviCLVQU2sqP0E-OZzeezQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 12:50:14
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:50:11.044630 2026] [security2:error] [pid 9223:tid 9223] [client 172.69.155.37:10224] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:50:11.044630 2026] [security2:error] [pid 9223:tid 9223] [client 172.69.155.37:10224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aws.corepest.com"] [uri "/.git/HEAD"] [unique_id "avhZA2RuYJqZzMFzys8aAgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-14 07:25:24
UTC ·
(9 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-14T07:23:30.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:49:00
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:48:52.443697 2026] [security2:error] [pid 30408:tid 30421] [client 172.69.155.37:10003] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:48:52.443697 2026] [security2:error] [pid 30408:tid 30421] [client 172.69.155.37:10003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "austintexasplasticsurgery.aafm.us"] [uri "/.git/config"] [unique_id "avfaJCHPNuHg8QvcFVHKsQAAAYs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:27:31
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:27:22.652736 2026] [security2:error] [pid 534809:tid 534809] [client 172.69.155.37:12701] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:27:22.652736 2026] [security2:error] [pid 534809:tid 534809] [client 172.69.155.37:12701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allafricaadventures.com"] [uri "/.git/HEAD"] [unique_id "avfVGrK-riFg0L2XegzwPQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-11-13 22:31:15
UTC ·
(18 hours ago)
-:443 172.69.155.37 - - [13/Nov/2026:23:31:12 +0100] - "GET /.git/config HTTP/2.0" 404 55153 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
🇳🇱
BlueWire Hosting
2026-11-13 20:50:53
UTC ·
(19 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇫🇷
Little Iguana
2026-11-13 13:14:01
UTC ·
(1 day ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇧🇪
boxed-it
2026-11-13 09:47:00
UTC ·
(1 day ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇩🇪
FeG Deutschland
2026-11-12 16:25:52
UTC ·
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
Anonymous
2026-11-12 15:44:50
UTC ·
(2 days ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 14:44:51
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:44:46.290080 2026] [security2:error] [pid 20453:tid 20453] [client 172.69.155.37:11060] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:44:46.290080 2026] [security2:error] [pid 20453:tid 20453] [client 172.69.155.37:11060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wea-inc.com"] [uri "/.git/config"] [unique_id "avXQ3mOzC7allDPrmkskfQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 23:22:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:22:02.233190 2026] [security2:error] [pid 1736:tid 1736] [client 172.69.155.37:10474] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:22:02.233190 2026] [security2:error] [pid 1736:tid 1736] [client 172.69.155.37:10474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teguer.com"] [uri "/.git/HEAD"] [unique_id "avT4miGhrPC2SwUs1xQ-bQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-11 22:24:04
UTC ·
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack