🇩🇪
ghostwarriors
2026-11-08 06:50:11
UTC ·
(22 minutes ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-11-08 06:38:54
UTC ·
(33 minutes ago)
172.64.198.34 - - [08/Nov/2026:03:22:37 +0100] "GET /.git/config HTTP/2.0" 403 368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
172.64.198.34 - - [08/Nov/2026:02:35:33 +0100] "GET /.git/config HTTP/2.0" 403 3 ...
show more
172.64.198.34 - - [08/Nov/2026:03:22:37 +0100] "GET /.git/config HTTP/2.0" 403 368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
172.64.198.34 - - [08/Nov/2026:02:35:33 +0100] "GET /.git/config HTTP/2.0" 403 377 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
172.64.198.34 - - [08/Nov/2026:07:38:51 +0100] "GET /.git/config HTTP/2.0" 301 414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Web App Attack
Hacking
Anonymous
2026-11-08 05:37:32
UTC ·
(1 hour ago)
172.64.198.34 - - [08/Nov/2026:06:37:31 +0100] "GET /.git/config HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇧🇪
madeit
2026-11-08 04:56:22
UTC ·
(2 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:53:42
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:53:37.023458 2026] [security2:error] [pid 3114817:tid 3114853] [client 172.64.198.34:1271 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:53:37.023458 2026] [security2:error] [pid 3114817:tid 3114853] [client 172.64.198.34:12713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "managementconsultant.us"] [uri "/.git/config"] [unique_id "avAAUac-oKXYNswRB2taHwAAANg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
[email protected]
2026-11-08 04:38:30
UTC ·
(2 hours ago)
172.64.198.34 - - [08/Nov/2026:05:38:29 +0100] "GET /.git/HEAD HTTP/2.0" 404 461 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-08 04:26:15
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:26:07.712768 2026] [security2:error] [pid 19231:tid 19231] [client 172.64.198.34:11639] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:26:07.712768 2026] [security2:error] [pid 19231:tid 19231] [client 172.64.198.34:11639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thesandboxsa.com.redondotile.com"] [uri "/.git/config"] [unique_id "au_536pGVccAwBP-eKFIIgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:53:20
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:53:14.566503 2026] [security2:error] [pid 1981:tid 1981] [client 172.64.198.34:11122] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:53:14.566503 2026] [security2:error] [pid 1981:tid 1981] [client 172.64.198.34:11122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wooferhound.com"] [uri "/.git/config"] [unique_id "au_yKh6NsnhNqeZdSKAiBAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:30:25
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:30:20.159474 2026] [security2:error] [pid 3585:tid 3585] [client 172.64.198.34:13072] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:30:20.159474 2026] [security2:error] [pid 3585:tid 3585] [client 172.64.198.34:13072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icwcruisersguide.com"] [uri "/.git/HEAD"] [unique_id "au_szM2htFbDon9-NZ0QEAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:43:00
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:42:56.081591 2026] [security2:error] [pid 18642:tid 18642] [client 172.64.198.34:13379] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:42:56.081591 2026] [security2:error] [pid 18642:tid 18642] [client 172.64.198.34:13379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richardpetersbooks.com"] [uri "/.git/HEAD"] [unique_id "au_hsGDkBUIjOlGQhfAFGgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:11:54
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:11:50.660658 2026] [security2:error] [pid 1088:tid 1088] [client 172.64.198.34:12445] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:11:50.660658 2026] [security2:error] [pid 1088:tid 1088] [client 172.64.198.34:12445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virtualfresco.com"] [uri "/.git/HEAD"] [unique_id "au_aZqaeT72ZxpboDIYCTgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:45:25
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:45:16.402018 2026] [security2:error] [pid 5392:tid 5392] [client 172.64.198.34:12517] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:45:16.402018 2026] [security2:error] [pid 5392:tid 5392] [client 172.64.198.34:12517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vespaitaliancafe.com"] [uri "/.git/HEAD"] [unique_id "au_ULLjD3ahzMnyjVjVtcgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:56:39
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:56:36.123143 2026] [security2:error] [pid 7994:tid 7994] [client 172.64.198.34:10666] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:56:36.123143 2026] [security2:error] [pid 7994:tid 7994] [client 172.64.198.34:10666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trinidadlimo.com"] [uri "/.git/config"] [unique_id "au_IxJsmkXRXj3xfacXd9QAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:41:17
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:41:14.508161 2026] [security2:error] [pid 6711:tid 6711] [client 172.64.198.34:10414] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:41:14.508161 2026] [security2:error] [pid 6711:tid 6711] [client 172.64.198.34:10414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sixsensehealing.com"] [uri "/.git/HEAD"] [unique_id "au_FKt-36UnBcUvfUmEyegAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
cleverest.eu
2026-11-07 23:23:44
UTC ·
(7 hours ago)
MimirWAF has 2 incidents from 1 distinct domain => {"bad_request_uri / vcs_probe","blacklisted_access / definite_repeat_offender"}
Brute-Force
Web App Attack