2026-10-16 11:07:03
(1 week ago)
Automated web scanner. Requested suspicious paths: /.git/index. UTC: 2026-10-16 10:23:37.
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-14 23:23:39
(1 week ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 12:15:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:15:00.681772 2026] [security2:error] [pid 24500:tid 24500] [client 192.210.144.118:52417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tolenaar.com"] [uri "/.git/HEAD"] [unique_id "as9yRDx0r06OqJcdCXSFrgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:24:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:24:22.516652 2026] [security2:error] [pid 6768:tid 6768] [client 192.210.144.118:59553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.tjwus.com"] [uri "/.git/HEAD"] [unique_id "as9YVgTBKWseDbnBaafNvAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 08:39:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 04:39:28.746447 2026] [security2:error] [pid 12028:tid 12028] [client 192.210.144.118:34681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tijuana-bibles.com"] [uri "/.git/HEAD"] [unique_id "as8_wPj9TfzvAysdf-Ke5QAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:22:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:22:24.349661 2026] [security2:error] [pid 3191:tid 3191] [client 192.210.144.118:50194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.therennas.com"] [uri "/.git/HEAD"] [unique_id "as8foJLjbgagjVeZjgRXIAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 00:40:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:40:03.373003 2026] [security2:error] [pid 17532:tid 17532] [client 192.210.144.118:46093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tell-me-first.com"] [uri "/.git/HEAD"] [unique_id "as7PYyoqQMMIx_FcwxQHuQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 00:14:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:14:37.941688 2026] [security2:error] [pid 9880:tid 9880] [client 192.210.144.118:45381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tekrav.com"] [uri "/.git/HEAD"] [unique_id "as7JbQjjHt1uhmtER68G-wAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:52:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:52:28.670252 2026] [security2:error] [pid 26155:tid 26155] [client 192.210.144.118:55076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.techlinks.com"] [uri "/.git/HEAD"] [unique_id "as62LGjaK4__bwo7XE0-zAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-13 08:24:02
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 05:01:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:01:05.827615 2026] [security2:error] [pid 15774:tid 15803] [client 192.210.144.118:56152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.30acre.net"] [uri "/.git/HEAD"] [unique_id "as27EWHbz5JLKGGFGzNsuwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
breubit
2026-10-12 17:06:49
(1 week ago)
192.210.144.118 - - [12/Oct/2026:19:06:48 +0200] "GET /.git/HEAD HTTP/1.1" 404 4448 "-" "Python-urll ...
show more
192.210.144.118 - - [12/Oct/2026:19:06:48 +0200] "GET /.git/HEAD HTTP/1.1" 404 4448 "-" "Python-urllib/3.10"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 06:29:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 02:28:53.098945 2026] [security2:error] [pid 5439:tid 5439] [client 192.210.144.118:50506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carlosmoltherapy.com.carlosmol.com"] [uri "/.git/HEAD"] [unique_id "asx-Jesr5XPITHqUPEJgygAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-10 18:40:23
(2 weeks ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 192.210.144.118 - - [10/Oct/2026:20:40:22 +0200] "GET /.git/HEAD HTTP/1.1" 403 2128 "-" "Python-urllib/3.10"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 01:51:12
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.144.118 (192-210-144-118-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:51:02.317541 2026] [security2:error] [pid 10750:tid 10750] [client 192.210.144.118:58328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "testo.bwill.dev"] [uri "/.git/HEAD"] [unique_id "ashIhnK60R3dvKkNF_xv_AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
