🇺🇸
TPI-Abuse
2026-11-08 16:48:53
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:48:48.223552 2026] [security2:error] [pid 18333:tid 18333] [client 172.64.198.82:9573] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:48:48.223552 2026] [security2:error] [pid 18333:tid 18333] [client 172.64.198.82:9573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrappliancefl.com.mrappliancega.com"] [uri "/.git/config"] [unique_id "avCn8FnOqz436sC412UgigAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 12:23:05
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:22:59.987189 2026] [security2:error] [pid 25145:tid 25145] [client 172.64.198.82:11079] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:22:59.987189 2026] [security2:error] [pid 25145:tid 25145] [client 172.64.198.82:11079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.airplanechristmascards.com"] [uri "/.git/HEAD"] [unique_id "avBpo7amTvxgZ6IyFtDU_QAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-08 08:59:23
UTC ·
(10 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T08:56:45.000Z.
Web App Attack
🇺🇸
craudiovizai
2026-11-08 06:30:32
UTC ·
(12 hours ago)
Automated honeypot detection. blocked ip against a Next.js application. Paths: /.git/HEAD, /.git/config. Blocked at the edge.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-08 04:04:57
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:04:49.533631 2026] [security2:error] [pid 15523:tid 15523] [client 172.64.198.82:11731] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:04:49.533631 2026] [security2:error] [pid 15523:tid 15523] [client 172.64.198.82:11731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acmax.com"] [uri "/.git/HEAD"] [unique_id "au_04bpMWFUfsOf37Y7NmAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:48:58
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:48:50.111486 2026] [security2:error] [pid 5220:tid 5220] [client 172.64.198.82:11223] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:48:50.111486 2026] [security2:error] [pid 5220:tid 5220] [client 172.64.198.82:11223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riedmannfamily.com"] [uri "/.git/config"] [unique_id "au_xIrobLYWWX6UJdJ9XJQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:00:02
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:59:57.728339 2026] [security2:error] [pid 14644:tid 14644] [client 172.64.198.82:10672] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:59:57.728339 2026] [security2:error] [pid 14644:tid 14644] [client 172.64.198.82:10672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.midwayisland.com"] [uri "/.git/config"] [unique_id "au_lrfFqvWxaoQyQEfqWZQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:30:47
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:30:42.066098 2026] [security2:error] [pid 11559:tid 11559] [client 172.64.198.82:9993] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:30:42.066098 2026] [security2:error] [pid 11559:tid 11559] [client 172.64.198.82:9993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "therennas.com"] [uri "/.git/HEAD"] [unique_id "au_e0gvBDr1ro0pful3vJgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:46:23
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:46:14.756592 2026] [security2:error] [pid 2592014:tid 2592138] [client 172.64.198.82:1172 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:46:14.756592 2026] [security2:error] [pid 2592014:tid 2592138] [client 172.64.198.82:11727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fightingforallergyfreefood.com"] [uri "/.git/HEAD"] [unique_id "au_UZuY45S9T1Hf17J-txQAAAkY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:15:53
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:15:48.871091 2026] [security2:error] [pid 6898:tid 6898] [client 172.64.198.82:11715] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:15:48.871091 2026] [security2:error] [pid 6898:tid 6898] [client 172.64.198.82:11715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aavondalervstorage.com"] [uri "/.git/config"] [unique_id "au_NREI8zMOsm78vZjirZwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-08 00:46:42
UTC ·
(18 hours ago)
"GET /.git/HEAD HTTP/1.1" 403 6551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇩🇪
altenglaner
2026-11-08 00:32:21
UTC ·
(18 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 21:49:00
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:48:56.567021 2026] [security2:error] [pid 25666:tid 25685] [client 172.64.198.82:11018] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:48:56.567021 2026] [security2:error] [pid 25666:tid 25685] [client 172.64.198.82:11018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eatdrinkgroove.com"] [uri "/.git/HEAD"] [unique_id "au-cyC8opqq2UjcAXcscOwAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
auridh
2026-11-04 07:51:44
UTC ·
(4 days ago)
WAF block: crowdsecurity/vpatch-git-config from 172.64.198.82 ([REDACTED])
Web App Attack
🇩🇪
pltcldvlpr
2026-11-02 14:12:22
UTC ·
(6 days ago)
CMS/framework probe: 172.64.198.82 - - [02/Nov/2026:15:12:22 +0100] "GET /.env.local HTTP/2.0" 404 564 "https://www.google.com/search?q=tracking.netznarbe.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13 ...
show more
CMS/framework probe: 172.64.198.82 - - [02/Nov/2026:15:12:22 +0100] "GET /.env.local HTTP/2.0" 404 564 "https://www.google.com/search?q=tracking.netznarbe.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" asn=13335 org="Cloudflare, Inc." country=PL
...
show less
Web App Attack