🇺🇸
TPI-Abuse
2025-12-05 04:28:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:28:06.793402 2025] [security2:error] [pid 25604:tid 25621] [client 173.249.60.31:47934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khalessilaw.com"] [uri "/.git/config"] [unique_id "aTJfVpj7o2nNVMhsi-9KKgAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:56:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:56:41.401257 2025] [security2:error] [pid 4758:tid 4758] [client 173.249.60.31:42038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afjm.net"] [uri "/.git/config"] [unique_id "aS5xiWsK5Bcc0c-ZdNudvQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 01:29:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 20:29:55.501645 2025] [security2:error] [pid 18292:tid 18292] [client 173.249.60.31:44662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fedeolivaperu.com"] [uri "/.git/config"] [unique_id "aS5BE8kgjcx3PFek1Glo1AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
IROK
2025-11-27 00:02:22
(6 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
🇺🇸
ambor
2025-11-26 06:42:34
(6 months ago)
Honeypot access: Git configuration file access attempt. Path: /.git/config
Web App Attack
🇧🇪
voormedia
2025-11-21 02:15:12
(6 months ago)
Accessed trap at '/.git/config'
Web App Attack
🇫🇷
LRob.fr
2025-11-20 17:30:02
(6 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2025-11-19 22:24:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 17:24:28.595143 2025] [security2:error] [pid 4958:tid 4958] [client 173.249.60.31:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ndanetworks.com"] [uri "/.git/config"] [unique_id "aR5DnKqQIgM6ca8ZIMJOhwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mawan
2025-11-18 19:03:11
(6 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2025-11-18 08:26:12
(6 months ago)
173.249.60.31 - - [18/Nov/2025:01:26:12 -0700] "GET /.git/config HTTP/1.1" 300 8926 "-" "boto3/1.34. ...
show more
173.249.60.31 - - [18/Nov/2025:01:26:12 -0700] "GET /.git/config HTTP/1.1" 300 8926 "-" "boto3/1.34.0 Python/3.12"
...
show less
Web App Attack
🇩🇪
rh24
2025-11-18 04:03:55
(6 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 173.249.60.31 (FR/Fr ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 173.249.60.31 (FR/France/vmi2781042.contaboserver.net)
show less
Bad Web Bot
🇩🇪
on-com
2025-11-17 15:20:16
(6 months ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-17 11:51:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 06:51:20.606549 2025] [security2:error] [pid 14845:tid 14845] [client 173.249.60.31:54670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intothebigempty.com"] [uri "/.git/config"] [unique_id "aRsMOJQTc04mueZ0t_0X9gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Roper123
2025-11-16 13:19:11
(6 months ago)
Web app attack
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 13:11:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 173.249.60.31 (vmi2781042.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 08:11:47.094958 2025] [security2:error] [pid 11323:tid 11323] [client 173.249.60.31:46550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wholesalelivelobsters.com"] [uri "/.git/config"] [unique_id "aRnNk7tMDz85dS6DSVexFAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack