2026-10-16 19:25:02
(3 hours ago)
suspicious request in access.log
Web App Attack
🇧🇪
voormedia
2026-10-16 11:13:51
(11 hours ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:14:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com) ...
show more
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:14:04.160101 2026] [security2:error] [pid 7976:tid 7976] [client 96.8.117.98:41479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "connectigramme.com.linguistes.com"] [uri "/.git/HEAD"] [unique_id "atCnbHjIJYVHNX2fTQyTFwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 12:58:42
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com) ...
show more
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:58:32.422761 2026] [security2:error] [pid 4969:tid 4969] [client 96.8.117.98:45250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabrina.tonylai.com"] [uri "/.git/HEAD"] [unique_id "as98ePLhcNzT4JaFMrwaAAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:03:28
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com) ...
show more
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:03:23.212419 2026] [security2:error] [pid 29722:tid 29722] [client 96.8.117.98:49338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.title6.com"] [uri "/.git/HEAD"] [unique_id "as9Ta4goSGCBCh5MMEIsLgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 09:10:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com) ...
show more
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:10:41.108050 2026] [security2:error] [pid 17779:tid 17779] [client 96.8.117.98:56947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.timjbutler.com"] [uri "/.git/HEAD"] [unique_id "as9HEeQuPOkQHUkMbm2I3AAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 08:17:15
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com) ...
show more
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 04:17:06.621095 2026] [security2:error] [pid 18217:tid 18217] [client 96.8.117.98:39100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloud.tidarat.com"] [uri "/.git/HEAD"] [unique_id "as86giVVyviDucHGZvOfhAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 07:57:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com) ...
show more
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 03:57:35.012009 2026] [security2:error] [pid 25305:tid 25305] [client 96.8.117.98:56109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.tianabes.com"] [uri "/.git/HEAD"] [unique_id "as817w3TlPW1ZoWKZ-2iOAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 03:56:05
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com) ...
show more
(mod_security) mod_security (id:210492) triggered by 96.8.117.98 (96-8-117-98-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:55:55.346355 2026] [security2:error] [pid 28017:tid 28028] [client 96.8.117.98:49476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.the-aquifer.com"] [uri "/.git/HEAD"] [unique_id "as79S5eABireJCfck5ACaQAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack