🇺🇸
TPI-Abuse
2026-09-14 10:09:19
(37 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 06:09:15.042992 2026] [security2:error] [pid 18031:tid 18031] [client 2a02:4780:12:a498::1:46042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galaxyretro.com"] [uri "/.git/config"] [unique_id "aqfHy85Asmac-cEbpCkVkAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 09:26:35
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 05:26:31.361788 2026] [security2:error] [pid 23950:tid 23950] [client 2a02:4780:12:a498::1:59808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gainow.net"] [uri "/.git/config"] [unique_id "aqe9xxhaSg5VXtXi6TCRNAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-14 09:03:05
(1 hour ago)
[MonSep1411:02:59.3625452026][security2:error][pid1594160:tid1594202][client2a02:4780:12:a498::1:0]M ...
show more
[MonSep1411:02:59.3625452026][security2:error][pid1594160:tid1594202][client2a02:4780:12:a498::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"gagspettacolo.ch\"][uri\"/.git/config\"][unique_id\"aqe4Q3zzWaOoGGoV90rubwAAAEY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 08:46:33
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 04:46:26.100705 2026] [security2:error] [pid 28695:tid 28695] [client 2a02:4780:12:a498::1:50830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaeltv.com"] [uri "/.git/config"] [unique_id "aqe0Yu1txLj98zfj-aO-dgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 08:16:35
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 04:16:29.954557 2026] [security2:error] [pid 12619:tid 12619] [client 2a02:4780:12:a498::1:52818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabver.com"] [uri "/.git/config"] [unique_id "aqetXSHz0W5BC3oTPpoS8QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-14 08:00:42
(2 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-09-14 08:00 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 07:43:20
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 03:43:15.791018 2026] [security2:error] [pid 18600:tid 18600] [client 2a02:4780:12:a498::1:54844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabbyspetnanny.com"] [uri "/.git/config"] [unique_id "aqelk7pD4LMvpHyT18DpMwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 06:50:17
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 02:50:12.657928 2026] [security2:error] [pid 2889:tid 2900] [client 2a02:4780:12:a498::1:50560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "g3-contracting.com"] [uri "/.git/config"] [unique_id "aqeZJHORu4o7Od5O2Z6qagAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 06:20:43
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 02:20:37.940202 2026] [security2:error] [pid 11386:tid 11386] [client 2a02:4780:12:a498::1:50572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "g-drome.com"] [uri "/.git/config"] [unique_id "aqeSNZfNVwrkdyl4zGzgugAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 05:48:06
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 01:47:59.590100 2026] [security2:error] [pid 12760:tid 12760] [client 2a02:4780:12:a498::1:53792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fynyx.com"] [uri "/.git/config"] [unique_id "aqeKj3JNYbWzzZyGc0PKIwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 05:09:15
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 01:09:08.995942 2026] [security2:error] [pid 20703:tid 20703] [client 2a02:4780:12:a498::1:46852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxbgsanta.com"] [uri "/.git/config"] [unique_id "aqeBdHvV4d4ZOgqWa79zqAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 04:48:38
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 00:48:34.159974 2026] [security2:error] [pid 28055:tid 28055] [client 2a02:4780:12:a498::1:44944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fwa51.com"] [uri "/.git/config"] [unique_id "aqd8onjAJTBdKo3mDSAq2gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 04:33:13
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 00:33:09.754566 2026] [security2:error] [pid 4617:tid 4617] [client 2a02:4780:12:a498::1:56338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fuzzyecho.com"] [uri "/.git/config"] [unique_id "aqd5BeIC-nJtAyUAvuxnhQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-14 04:09:10
(6 hours ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a02:4780:12:a498::1 - - [14/Sep/2026:06:09:08 +0200] "GET /.git/config HTTP/1.1" 404 14610 "-" "python-requests/2.25.1"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 03:58:13
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:a498::1 (srv1058532.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 23:58:09.830383 2026] [security2:error] [pid 5817:tid 5817] [client 2a02:4780:12:a498::1:57548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "futureproductionsonline.com"] [uri "/.git/config"] [unique_id "aqdw0T8RBTBGtnRurhYmPAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
