🇧🇪
voormedia
2026-07-30 13:30:26
(1 hour ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇬🇧
Bytemark
2026-07-30 12:03:26
(2 hours ago)
193.37.32.153 - - [30/Jul/2026:13:03:25 +0100] "GET /.git/HEAD HTTP/1.1" 301 6843 "-" "Python-urllib ...
show more
193.37.32.153 - - [30/Jul/2026:13:03:25 +0100] "GET /.git/HEAD HTTP/1.1" 301 6843 "-" "Python-urllib/3.10"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 10:03:44
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 06:03:39.688402 2026] [security2:error] [pid 30628:tid 30628] [client 193.37.32.153:50945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hurricaneglassgaragedoors.glassgaragedoors.com"] [uri "/.git/HEAD"] [unique_id "amshe9RY1ez_2_c92GqcGwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-07-30 08:49:16
(5 hours ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.git/HEAD | UA: Python-urllib/3.10 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-30 07:52:21
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 03:52:13.538870 2026] [security2:error] [pid 3610314:tid 3610314] [client 193.37.32.153:22339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aiinlocal.com.verdadesreales.com"] [uri "/.git/HEAD"] [unique_id "amsCrfRsqvLa_d-_lGBHKgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-30 07:28:48
(7 hours ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-07-30 07:26:54
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 03:26:47.471089 2026] [security2:error] [pid 273354:tid 273452] [client 193.37.32.153:24953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ccgparquitectos.com"] [uri "/.git/HEAD"] [unique_id "amr8t4yO3tWSnIgR31mx-wAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 00:04:04
(14 hours ago)
193.37.32.153 - - [30/Jul/2026:03:04:03 +0300] "GET /.git/HEAD HTTP/1.1" 404 4703 "-" "Python-urllib ...
show more
193.37.32.153 - - [30/Jul/2026:03:04:03 +0300] "GET /.git/HEAD HTTP/1.1" 404 4703 "-" "Python-urllib/3.10"
193.37.32.153 - - [30/Jul/2026:03:04:03 +0300] "GET /.git/HEAD HTTP/1.1" 404 4682 "-" "Python-urllib/3.10"
...
show less
Web App Attack
🇩🇪
4server
2026-07-29 22:31:09
(16 hours ago)
[ThuJul3000:31:03.2515022026][security2:error][pid2128724:tid2128774][client193.37.32.153:0]ModSecur ...
show more
[ThuJul3000:31:03.2515022026][security2:error][pid2128724:tid2128774][client193.37.32.153:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"hosting-royal.ch.136-243-54-122.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"amp_JzNZbUreGhHM0C-MOgAAAEo\"]
show less
Port Scan
Brute-Force
Web App Attack
🇹🇷
neron
2026-07-29 20:19:38
(18 hours ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 17:24:31
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 13:24:04.032555 2026] [security2:error] [pid 1860:tid 1860] [client 193.37.32.153:43553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lavozdom.aguasolar.com"] [uri "/.git/HEAD"] [unique_id "amo3NMJcE2eB6iaMuDX0WQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-07-29 15:37:22
(23 hours ago)
wp2shell bug exploit
Hacking
Exploited Host
Web App Attack
🇦🇹
Pingger Shikkoken
2026-07-29 13:39:39
(1 day ago)
2026-07-29T13:39:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-07-29T13:39:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=193.37.32.153 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=5201 DF PROTO=TCP SPT=26455 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-29T13:39:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=193.37.32.153 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=5202 DF PROTO=TCP SPT=26455 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-07-29T13:39:42+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=193.37.32.153 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=5203 DF PROTO=TCP SPT=26455 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-29 11:23:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 07:23:34.515670 2026] [security2:error] [pid 3083422:tid 3083422] [client 193.37.32.153:21455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "connectigramme.com.linguistes.com"] [uri "/.git/HEAD"] [unique_id "amnitp3Oqyh4lgkC6ZFz7gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-07-29 05:39:53
(1 day ago)
Accessed trap at '/.git/HEAD'
Web App Attack