🇧🇷
borbolla
2026-11-09 22:47:05
UTC ·
(1 hour ago)
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /.git/HEAD HTTP/2.0"
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-09 15:25:34
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:25:31.548019 2026] [security2:error] [pid 27333:tid 27333] [client 172.64.198.63:13340] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:25:31.548019 2026] [security2:error] [pid 27333:tid 27333] [client 172.64.198.63:13340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.susanleeward.com"] [uri "/.git/HEAD"] [unique_id "avHl655Fs1HA8Tql27u0JgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
NXTwoThou
2026-11-09 15:17:12
UTC ·
(8 hours ago)
/.git/HEAD
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:30:23
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:30:18.289999 2026] [security2:error] [pid 8148:tid 8148] [client 172.64.198.63:9639] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:30:18.289999 2026] [security2:error] [pid 8148:tid 8148] [client 172.64.198.63:9639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.davidharrisgriffith.com"] [uri "/.git/config"] [unique_id "avHK6qjJItz4kFjkMCwpXwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:07:39
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:07:31.499415 2026] [security2:error] [pid 15083:tid 15083] [client 172.64.198.63:13045] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:07:31.499415 2026] [security2:error] [pid 15083:tid 15083] [client 172.64.198.63:13045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.magacine.tv"] [uri "/.git/config"] [unique_id "avHFk3MLy6WDFRJ8ThDSaQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:59:42
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:59:38.474462 2026] [security2:error] [pid 10539:tid 10539] [client 172.64.198.63:13849] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:59:38.474462 2026] [security2:error] [pid 10539:tid 10539] [client 172.64.198.63:13849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kirbysmw.com"] [uri "/.git/HEAD"] [unique_id "avG1quCHkDeX2v6bLdgmDgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:41:08
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:41:01.603851 2026] [security2:error] [pid 20560:tid 20560] [client 172.64.198.63:13671] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:41:01.603851 2026] [security2:error] [pid 20560:tid 20560] [client 172.64.198.63:13671] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jessicabaer.com"] [uri "/.git/config"] [unique_id "avGxTbHsNF7geTCqztHf6AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:55:09
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:55:01.819469 2026] [security2:error] [pid 19344:tid 19344] [client 172.64.198.63:11349] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:55:01.819469 2026] [security2:error] [pid 19344:tid 19344] [client 172.64.198.63:11349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.michaelandkatie.us"] [uri "/.git/HEAD"] [unique_id "avGmhZU6HWKLb2LLdFL0MAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:26:33
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:26:29.157041 2026] [security2:error] [pid 4372:tid 4372] [client 172.64.198.63:9914] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:26:29.157041 2026] [security2:error] [pid 4372:tid 4372] [client 172.64.198.63:9914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cromaki.com"] [uri "/.git/HEAD"] [unique_id "avGRxV6_utWOeo31wu9PTAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tsZero
2026-11-09 08:54:46
UTC ·
(15 hours ago)
Scan example: path=/.git/config status=404
Hacking
🇺🇸
TPI-Abuse
2026-11-09 08:51:50
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:51:46.151322 2026] [security2:error] [pid 10240:tid 10240] [client 172.64.198.63:13406] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:51:46.151322 2026] [security2:error] [pid 10240:tid 10240] [client 172.64.198.63:13406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mjaaforum.org"] [uri "/.git/HEAD"] [unique_id "avGJorm0rEA54i8nTVnMWQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-09 08:44:25
UTC ·
(15 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T08:42:23.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:08:10
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:08:06.476342 2026] [security2:error] [pid 15159:tid 15159] [client 172.64.198.63:9648] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:08:06.476342 2026] [security2:error] [pid 15159:tid 15159] [client 172.64.198.63:9648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ofertasdetrabajosyempleos.com"] [uri "/.git/HEAD"] [unique_id "avF_Zn0qv5D-0f1igrrYEwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:55:23
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:55:15.934933 2026] [security2:error] [pid 29319:tid 29319] [client 172.64.198.63:13079] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:55:15.934933 2026] [security2:error] [pid 29319:tid 29319] [client 172.64.198.63:13079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sunshinenv.com"] [uri "/.git/config"] [unique_id "avFuU8BiTaq2SnDJ3c01fAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:18:59
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:18:55.338852 2026] [security2:error] [pid 4039:tid 4039] [client 172.64.198.63:14055] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:18:55.338852 2026] [security2:error] [pid 4039:tid 4039] [client 172.64.198.63:14055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bringkittyhome.com"] [uri "/.git/HEAD"] [unique_id "avFlz_hGryRr7ECiLAmcXAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
