🇺🇸
TPI-Abuse
2026-11-08 05:47:01
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:46:57.550563 2026] [security2:error] [pid 19343:tid 19343] [client 172.64.198.74:12074] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:46:57.550563 2026] [security2:error] [pid 19343:tid 19343] [client 172.64.198.74:12074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mandel.vc"] [uri "/.git/config"] [unique_id "avAM0YbhlXnD_TR8Y9ehdgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 05:14:05
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:13:56.760096 2026] [security2:error] [pid 22581:tid 22581] [client 172.64.198.74:13052] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:13:56.760096 2026] [security2:error] [pid 22581:tid 22581] [client 172.64.198.74:13052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jewersmail.com.crazycoin.net"] [uri "/.git/HEAD"] [unique_id "avAFFFmkzxEz2UJ1a3eiNQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-11-08 05:03:59
UTC ·
(2 hours ago)
cloudlinux2 fail2ban: 2026-11-08 05:59:17,962 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 91.193.232.82 - 2026-11-08 05:59:17cloudlinux2 fail2ban: 2026-11-08 05:59:43,853 fail2ban.filter [1672]: INFO [plesk-wordpress] F ...
show more
cloudlinux2 fail2ban: 2026-11-08 05:59:17,962 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 91.193.232.82 - 2026-11-08 05:59:17cloudlinux2 fail2ban: 2026-11-08 05:59:43,853 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 172.98.33.137 - 2026-11-08 05:59:43cloudlinux2 fail2ban: 2026-11-08 06:00:36,329 fail2ban.actions [1672]: NOTICE [plesk-modsecurity] Unban 34.51.238.202cloudlinux2 fail2ban: 2026-11-08 06:00:50,068 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 172.68.159.225 - 2026-11-08 06:00:49cloudlinux2 fail2ban: 2026-11-08 06:00:50,081 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 172.68.159.144 - 2026-11-08 06:00:49cloudlinux2 fail2ban: 2026-11-08 06:00:52,797 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 172.64.198.45 - 2026-11-08 06:00:52cloudlinux2 fail2ban: 2026-11-08 06:00:52,808 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 172.64.198.74 - 2026-11-08 06:00:52cloudlinux2 fail2ba
show less
Web App Attack
🇩🇪
altenglaner
2026-11-08 05:01:56
UTC ·
(2 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
todix
2026-11-08 04:34:22
UTC ·
(2 hours ago)
"GET /.git/config HTTP/1.1" 301 5859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:21:51
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:21:43.472616 2026] [security2:error] [pid 8214:tid 8214] [client 172.64.198.74:10090] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:21:43.472616 2026] [security2:error] [pid 8214:tid 8214] [client 172.64.198.74:10090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iptncolon.org"] [uri "/.git/config"] [unique_id "au_418k7Bm7xPQ9gYx9qcwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:46:01
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:45:55.915229 2026] [security2:error] [pid 13628:tid 13628] [client 172.64.198.74:11311] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:45:55.915229 2026] [security2:error] [pid 13628:tid 13628] [client 172.64.198.74:11311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aluminatrailers.com"] [uri "/.git/config"] [unique_id "au_wc9QjHUHom5qhmaRzbAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:11:55
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:11:48.423697 2026] [security2:error] [pid 940:tid 940] [client 172.64.198.74:11924] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:11:48.423697 2026] [security2:error] [pid 940:tid 940] [client 172.64.198.74:11924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebeeplace.com"] [uri "/.git/config"] [unique_id "au_odPlDqMJ8TXARZARSVwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:56:37
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:56:29.796650 2026] [security2:error] [pid 2750521:tid 2750535] [client 172.64.198.74:9283 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:56:29.796650 2026] [security2:error] [pid 2750521:tid 2750535] [client 172.64.198.74:9283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dancing-turtles.kylight.com"] [uri "/.git/config"] [unique_id "au_k3QUNBfbRzXhpQ-q8zgAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:26:52
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:26:46.625860 2026] [security2:error] [pid 14268:tid 14268] [client 172.64.198.74:10109] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:26:46.625860 2026] [security2:error] [pid 14268:tid 14268] [client 172.64.198.74:10109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zheundu.com"] [uri "/.git/HEAD"] [unique_id "au_d5skXIyznjP8Zmasl_QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:28:57
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:28:50.072648 2026] [security2:error] [pid 9432:tid 9432] [client 172.64.198.74:12949] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:28:50.072648 2026] [security2:error] [pid 9432:tid 9432] [client 172.64.198.74:12949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thescarfcompany.com"] [uri "/.git/config"] [unique_id "au_QUv4RuY8HbskaTdGOlAAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:08:12
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:08:05.038070 2026] [security2:error] [pid 26359:tid 26359] [client 172.64.198.74:12611] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:08:05.038070 2026] [security2:error] [pid 26359:tid 26359] [client 172.64.198.74:12611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ink2wear.com"] [uri "/.git/HEAD"] [unique_id "au_LdYVpImU5Ui7fAvaqZwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-07 23:40:45
UTC ·
(7 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:20:03
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:19:58.135990 2026] [security2:error] [pid 2057:tid 2057] [client 172.64.198.74:11590] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:19:58.135990 2026] [security2:error] [pid 2057:tid 2057] [client 172.64.198.74:11590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guarinofurnituredesigns.com"] [uri "/.git/HEAD"] [unique_id "au-kDp2KP2YTHtnCIxwp2AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 21:46:45
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:46:39.028736 2026] [security2:error] [pid 3524:tid 3532] [client 172.64.198.74:10137] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:46:39.028736 2026] [security2:error] [pid 3524:tid 3532] [client 172.64.198.74:10137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fearofpools.com"] [uri "/.git/HEAD"] [unique_id "au-cP5bp0FpHF6vDq2ig-AAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack