|
🇩🇪
todix
|
|
"GET /.git/HEAD HTTP/1.1" 403 6525 "-" "Python-urllib/3.10"
|
Web App Attack
|
|
🇳🇱
Alt255
|
|
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.130.202.66 - - [06/Nov/2026:01:24:01 +0100] "GET /.git/HEAD HTTP/1.1" 301 446 "-" "Python-urllib/3.10"
...
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
|
Web App Attack
SSH
Hacking
|
|
🇫🇷
uthul
|
|
T-Pot honeypot: 10 hits on ports [443] (automated)
|
Port Scan
Web App Attack
|
|
🇩🇪
altenglaner
|
|
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
|
Hacking
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:01:45.305006 2026] [security2:error] [pid 8833:tid 8853] [client 45.130.202.66:25685] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:01:45.305006 2026] [security2:error] [pid 8833:tid 8853] [client 45.130.202.66:25685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lavotel.com"] [uri "/.git/HEAD"] [unique_id "auwNuZtdFCATUfex1YmrWgAAAEU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:06:05.141104 2026] [security2:error] [pid 23728:tid 23728] [client 45.130.202.66:35043] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:06:05.141104 2026] [security2:error] [pid 23728:tid 23728] [client 45.130.202.66:35043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bernardhorande.com.produktives.com"] [uri "/.git/HEAD"] [unique_id "auvynfxUUtguKV-PtfvbZAAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
Kejult
|
|
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 2 application-level events across 2 source port(s). Sensor(s): Tanner.
|
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:31:18.048398 2026] [security2:error] [pid 17299:tid 17299] [client 45.130.202.66:46093] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:31:18.048398 2026] [security2:error] [pid 17299:tid 17299] [client 45.130.202.66:46093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dci.legal.kountz.org"] [uri "/.git/HEAD"] [unique_id "auvcZhwglCL3_WmkoD5phwAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
WEB attack
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:07:02.735838 2026] [security2:error] [pid 20900:tid 20900] [client 45.130.202.66:29589] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:07:02.735838 2026] [security2:error] [pid 20900:tid 20900] [client 45.130.202.66:29589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gaksato.com"] [uri "/.git/HEAD"] [unique_id "auqvZrJm0RIC_4Aqay2vVwAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
BlueWire Hosting
|
|
High-confidence malicious configuration/VCS probe
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:34:28.614082 2026] [security2:error] [pid 9536:tid 9536] [client 45.130.202.66:23309] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:34:28.614082 2026] [security2:error] [pid 9536:tid 9536] [client 45.130.202.66:23309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ryan.robotrodeo.net"] [uri "/.git/HEAD"] [unique_id "auqLpAdBrM05-QegCk8fMwAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
Charlesiv
|
|
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
ASN: 137409 (GSL Networks Pty LTD)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/HEAD
Timestamp: 2026-11-04T00:30:20Z
Ray ID: a54f82713e6feb4c
UA: Python-urllib/3.10
|
Bad Web Bot
|
|
🇸🇪
eagle
|
|
45.130.202.66 - - [04/Nov/2026:00:33:35 +0000] "GET /.git/HEAD HTTP/1.1" 404 207 "-" "Python-urllib/3.10" "[server]"
...
|
Bad Web Bot
Web App Attack
|
