🇫🇷
mail.avx.gr
2026-07-17 15:19:21
(2 days ago)
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 185.137.164.19 - - [17/Jul/2026:18:19:19 +0300] " ...
show more
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 185.137.164.19 - - [17/Jul/2026:18:19:19 +0300] "GET /.git/HEAD HTTP/1.1" 301 162 "-" "Python-urllib/3.10"
show less
Web App Attack
🇩🇪
tsZero
2026-07-17 06:46:09
(3 days ago)
Scan example: path=/.git/HEAD status=403
Hacking
🇺🇸
TPI-Abuse
2026-07-17 06:02:26
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:02:22.114469 2026] [security2:error] [pid 4995:tid 4995] [client 185.137.164.19:39301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drhoss.solidthought.com"] [uri "/.git/HEAD"] [unique_id "alnFbiOTuD54rY3CG5S8WAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 05:41:35
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:41:29.451779 2026] [security2:error] [pid 208650:tid 208650] [client 185.137.164.19:64143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bikinilinks.puckerbikini.com"] [uri "/.git/HEAD"] [unique_id "alnAie6xxCByeKGRiWVtAgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 04:59:40
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:59:36.434780 2026] [security2:error] [pid 25970:tid 25970] [client 185.137.164.19:65277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "countrywoodworking.net.bandsolution.net"] [uri "/.git/HEAD"] [unique_id "alm2uHVbi7qSKRbPdBtGpAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-07-17 01:19:12
(3 days ago)
Bad bot activity detected (automated scraping/probing).
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 00:03:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 20:03:54.903452 2026] [security2:error] [pid 672951:tid 672951] [client 185.137.164.19:44611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "outofthebluephotography.love-n-promises.com"] [uri "/.git/HEAD"] [unique_id "allxalIPepiZezfosdCVwwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 22:30:18
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 18:30:14.153890 2026] [security2:error] [pid 11979:tid 12058] [client 185.137.164.19:24521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "booking.heworeblack.com"] [uri "/.git/HEAD"] [unique_id "allbdqUgNcXyKZ82ltha-wAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 21:42:05
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 17:41:56.757224 2026] [security2:error] [pid 10856:tid 10856] [client 185.137.164.19:55093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ggaccounting.services"] [uri "/.git/HEAD"] [unique_id "allQJLas1FO2JPUjviMVnwAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-07-16 06:11:31
(4 days ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-16 06:08:40
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:08:31.967789 2026] [security2:error] [pid 30496:tid 30496] [client 185.137.164.19:39661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sitebuilders.org.kerbros.com"] [uri "/.git/HEAD"] [unique_id "alh1XyEXf51Z3nVdGwep9wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 02:30:26
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:30:18.120406 2026] [security2:error] [pid 10992:tid 10992] [client 185.137.164.19:42013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.diydivaslv.andiamocomputers.com"] [uri "/.git/HEAD"] [unique_id "alhCOm6cBiAwxa6idry2DAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 02:11:57
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:11:51.554416 2026] [security2:error] [pid 26345:tid 26345] [client 185.137.164.19:39705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.safekit.abecasis.com"] [uri "/.git/HEAD"] [unique_id "alg95-Vfl45vP5_90RecqAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 01:53:30
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:53:27.384662 2026] [security2:error] [pid 6640:tid 6640] [client 185.137.164.19:44817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.letceterapublishing.kathrynmcbride.com"] [uri "/.git/HEAD"] [unique_id "alg5l-fAoAOn7HJ4ATk9KAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 01:26:19
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.137.164.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:26:12.862165 2026] [security2:error] [pid 17786:tid 17786] [client 185.137.164.19:65199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.davidsonmanagement.net"] [uri "/.git/HEAD"] [unique_id "algzNIYl6iIaOfO-L0BflgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack