🇺🇸
CBJ
2026-09-23 14:42:09
(1 day ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇳🇱
Alt255
2026-09-21 23:44:07
(3 days ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 50.3.159.3 - - [22/Sep/2026:01:44:06 +0200] "GET /.git/HEAD HTTP/1.1" 301 595 "-" "Python-urllib/3.10"
...
show less
Bad Web Bot
Web App Attack
2026-09-20 23:07:05
(4 days ago)
Automated web scanner. Requested suspicious paths: /.git/HEAD. UTC: 2026-09-20 22:59:40.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-20 21:59:50
(4 days ago)
Auto-ban: >3000 req/min op 2026-09-20
Web App Attack
SSH
Hacking
🇳🇱
Alt255
2026-09-20 16:09:24
(4 days ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 50.3.159.3 - - [20/Sep/2026:18:09:07 +0200] "GET /.git/HEAD HTTP/1.1" 403 4543 "-" "Python-urllib/3.10"
...
show less
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-20 04:03:05
(5 days ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-19 13:59:57
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 09:59:51.286864 2026] [security2:error] [pid 23395:tid 23395] [client 50.3.159.3:47334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aarentes.com"] [uri "/.git/HEAD"] [unique_id "aq6VV_DOCFexf0A7skSy_QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 19:43:11
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 15:42:16.710978 2026] [security2:error] [pid 6005:tid 6035] [client 50.3.159.3:59244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.registeredprojectmanager.aafm.us"] [uri "/.git/HEAD"] [unique_id "aq2UGAq4gDIgQPaH8GiICgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-18 14:48:18
(6 days ago)
[18/Sep/2026:17:48:18 +0300] -- 50.3.159.3 Ban reason: User-Agent Python-urllib
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 05:26:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 01:26:18.734193 2026] [security2:error] [pid 1540389:tid 1540389] [client 50.3.159.3:48736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kompassconsulting.com"] [uri "/.git/HEAD"] [unique_id "aqzLehy9mh0MOe_gLCI53wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-15 23:44:35
(1 week ago)
[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 50.3.159.3 - - [16/Sep/2026:01:44:34 +0200] "GET /.git/HEAD HTTP/1.1" 301 517 "-" "Python-urllib/3.10"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 19:06:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 15:06:23.123304 2026] [security2:error] [pid 30190:tid 30190] [client 50.3.159.3:33553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.passwordresearch.com"] [uri "/.git/HEAD"] [unique_id "aqhFr3ORbVYNizVKs8ZVsAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 14:07:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:07:35.393931 2026] [security2:error] [pid 10834:tid 10834] [client 50.3.159.3:45749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.manvsfoodlocations.com"] [uri "/.git/HEAD"] [unique_id "aqf_pwUXCeoTGSnqXay5_QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 03:27:43
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 23:27:36.989353 2026] [security2:error] [pid 18672:tid 18672] [client 50.3.159.3:43778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.illinois-online.org"] [uri "/.git/HEAD"] [unique_id "aqdpqNc90LCMRF4iryyZAwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 01:17:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 50.3.159.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 21:17:13.982361 2026] [security2:error] [pid 903:tid 903] [client 50.3.159.3:53321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.moleculardetective.org"] [uri "/.git/HEAD"] [unique_id "aqdLGb_pJPRpQjUsCgt9OAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
