🇩🇪
Holger
2026-11-11 20:26:40
UTC ·
(3 hours ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 19:40:45
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:40:40.628082 2026] [security2:error] [pid 25255:tid 25255] [client 172.64.198.85:10039] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:40:40.628082 2026] [security2:error] [pid 25255:tid 25255] [client 172.64.198.85:10039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kennythompson.com"] [uri "/.git/HEAD"] [unique_id "avTEuHCqwRIxbChQTKhGuQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
cleverest.eu
2026-11-11 11:29:41
UTC ·
(12 hours ago)
MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / vcs_probe"}
Web App Attack
🇩🇪
Lino Project
2026-11-11 11:09:53
UTC ·
(12 hours ago)
172.64.198.85 - - [11/Nov/2026:12:09:52 +0100] "GET /.git/HEAD HTTP/2.0" 404 275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-11 00:12:58
UTC ·
(23 hours ago)
Trying to access config files
Web App Attack
Anonymous
2026-11-10 10:09:16
UTC ·
(1 day ago)
jails=sensitive-probe; categories=14,21; events=1; first=2026-11-10T10:09:16Z; last=2026-11-10T10:09:16Z
Port Scan
Web App Attack
Anonymous
2026-11-10 05:47:22
UTC ·
(1 day ago)
172.64.198.85 - - [10/Nov/2026:05:47:21 +0000] "GET /.git/config HTTP/2.0" 404 49219 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
🇩🇪
pltcldvlpr
2026-11-10 04:01:54
UTC ·
(1 day ago)
CMS/framework probe: 172.64.198.85 - - [10/Nov/2026:05:01:54 +0100] "GET /.git/HEAD HTTP/2.0" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" asn=13335 org="Cloudflar ...
show more
CMS/framework probe: 172.64.198.85 - - [10/Nov/2026:05:01:54 +0100] "GET /.git/HEAD HTTP/2.0" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" asn=13335 org="Cloudflare, Inc." country=PL
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:18:05
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:17:57.982542 2026] [security2:error] [pid 2555:tid 2555] [client 172.64.198.85:10101] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:17:57.982542 2026] [security2:error] [pid 2555:tid 2555] [client 172.64.198.85:10101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.donnrowe.com"] [uri "/.git/config"] [unique_id "avKM5UsoqH2E_bvotze_FQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:01:24
UTC ·
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:01:17.024629 2026] [security2:error] [pid 25982:tid 25982] [client 172.64.198.85:12903] M ...
show more
(mod_security) mod_security (id:949110) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:01:17.024629 2026] [security2:error] [pid 25982:tid 25982] [client 172.64.198.85:12903] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "advancedrentalandservice.com"] [uri "/.git/config"] [unique_id "avJ67dQJniVQq0l9bu5_LwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-09 20:06:44
UTC ·
(2 days ago)
Trying to access config files
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 18:53:03
UTC ·
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇩🇪
shurizma
2026-11-09 15:58:56
UTC ·
(2 days ago)
[09/Nov/2026:15:58:55 +0000] - 401 401 - GET https node.shuri.gg "/.git/HEAD" [Client 172.64.198.85] [Length 77] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/53 ...
show more
[09/Nov/2026:15:58:55 +0000] - 401 401 - GET https node.shuri.gg "/.git/HEAD" [Client 172.64.198.85] [Length 77] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "-"
...
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-09 15:35:36
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:35:28.379269 2026] [security2:error] [pid 23234:tid 23234] [client 172.64.198.85:13335] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:35:28.379269 2026] [security2:error] [pid 23234:tid 23234] [client 172.64.198.85:13335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artspacecleveland.org"] [uri "/.git/config"] [unique_id "avHoQErJ0xPuGR_VgGSk2wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:29:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:29:30.486981 2026] [security2:error] [pid 24654:tid 24654] [client 172.64.198.85:9947] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:29:30.486981 2026] [security2:error] [pid 24654:tid 24654] [client 172.64.198.85:9947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.heavenwny.com.buffaloweddingdeejay.com"] [uri "/.git/config"] [unique_id "avHKuvPIsAcFJplCiLZ3OQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack