🇺🇸
TPI-Abuse
2026-07-16 10:46:11
(18 minutes ago)
(mod_security) mod_security (id:210492) triggered by 87.121.79.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 87.121.79.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:46:04.295992 2026] [security2:error] [pid 1304:tid 1304] [client 87.121.79.42:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.upskirtcrazy.com"] [uri "/.git/config"] [unique_id "ali2bAIYTqVKly3LliSGEQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-07-16 10:44:32
(19 minutes ago)
87.121.79.42 - - [16/Jul/2026:12:44:31 +0200] "GET /.git/config HTTP/1.1" 301 3751 "-" "Mozilla/5.0 ...
show more
87.121.79.42 - - [16/Jul/2026:12:44:31 +0200] "GET /.git/config HTTP/1.1" 301 3751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski
2026-07-16 10:22:45
(41 minutes ago)
IVski WAF | Sensitive file probe detected - looking for .git
Port Scan
Brute-Force
Web App Attack
🇬🇧
Axel
2026-07-16 09:53:21
(1 hour ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
2026-07-16 09:51:38
(1 hour ago)
87.121.79.42 - - [16/Jul/2026:06:51:37 -0300] "GET /.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 ( ...
show more
87.121.79.42 - - [16/Jul/2026:06:51:37 -0300] "GET /.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0"
...
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
🇫🇮
000rosiu
2026-07-16 07:42:15
(3 hours ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-16 06:52:01
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 87.121.79.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 87.121.79.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:51:55.208713 2026] [security2:error] [pid 24937:tid 24937] [client 87.121.79.42:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.git/config"] [unique_id "alh_iwixqjmEqwTEhzIXyQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-16 06:14:12
(4 hours ago)
87.121.79.42 - - [16/Jul/2026:08:14:12 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ( ...
show more
87.121.79.42 - - [16/Jul/2026:08:14:12 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36"
show less
Web App Attack
🇫🇷
Baking333
2026-07-16 06:07:27
(4 hours ago)
[redacted] 87.121.79.42 - - [16/Jul/2026:06:57:48 +0100] "GET /.git/config HTTP/1.1" 302 6753 0/5861 ...
show more
[redacted] 87.121.79.42 - - [16/Jul/2026:06:57:48 +0100] "GET /.git/config HTTP/1.1" 302 6753 0/58613 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" [redacted] 87.121.79.42 - - [16/Jul/2026:07:07:25 +0100] "GET /.git/config HTTP/1.1" 302 1528 0/58812 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.6"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 05:51:39
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 87.121.79.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 87.121.79.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:51:33.536237 2026] [security2:error] [pid 17907:tid 17907] [client 87.121.79.42:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.looksllc.com"] [uri "/.git/config"] [unique_id "alhxZVdSGneqc4eYKKdVJAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 05:31:06
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 87.121.79.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 87.121.79.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:30:58.244212 2026] [security2:error] [pid 1922:tid 1955] [client 87.121.79.42:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.grandmasgentlesteps.com"] [uri "/.git/config"] [unique_id "alhskoF03mNBdfAEdUGcbgAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-07-16 05:07:01
(5 hours ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,mx01]
Bad Web Bot
Web App Attack
🇺🇸
Mundo Bueno
2026-07-16 04:50:52
(6 hours ago)
[ISILIA Protection v2.1] Tentative d'accès: /.git/config | Pays: NL | UA: Mozilla/5.0 (Fedora; Linux ...
show more
[ISILIA Protection v2.1] Tentative d'accès: /.git/config | Pays: NL | UA: Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.
show less
Hacking
Web App Attack
🇩🇪
tsZero
2026-07-16 04:50:30
(6 hours ago)
Scan example: path=/.git/config status=403
Hacking
🇩🇪
Ba-Yu
2026-07-16 04:47:54
(6 hours ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack