🇺🇸
TPI-Abuse
2026-11-14 17:01:54
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:01:48.526293 2026] [security2:error] [pid 1418739:tid 1418739] [client 172.64.200.100:12 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:01:48.526293 2026] [security2:error] [pid 1418739:tid 1418739] [client 172.64.200.100:12540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fairwindsfarm.net"] [uri "/.git/config"] [unique_id "aviT_KmBzhi3mx9XfzpN0gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 16:04:08
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:04:03.891521 2026] [security2:error] [pid 24019:tid 24019] [client 172.64.200.100:13329] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:04:03.891521 2026] [security2:error] [pid 24019:tid 24019] [client 172.64.200.100:13329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jogmabogadospenalistas.com"] [uri "/.git/HEAD"] [unique_id "aviGcywPxpHEgo4SOkSbygAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 13:19:56
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:19:48.687790 2026] [security2:error] [pid 12535:tid 12535] [client 172.64.200.100:9971] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:19:48.687790 2026] [security2:error] [pid 12535:tid 12535] [client 172.64.200.100:9971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zoesaadeh.com"] [uri "/.git/HEAD"] [unique_id "avhf9Lh4E0BlkIQR1b-PcgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-14 01:06:10
UTC ·
(18 hours ago)
Trying to access config files
Web App Attack
🇩🇪
FeG Deutschland
2026-11-13 22:45:42
UTC ·
(21 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 07:08:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:08:10.798217 2026] [security2:error] [pid 1491:tid 1491] [client 172.64.200.100:13546] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:08:10.798217 2026] [security2:error] [pid 1491:tid 1491] [client 172.64.200.100:13546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.k0cgy.net"] [uri "/.git/config"] [unique_id "ava3WjiqFd7aH1f05HOwJwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:11:50
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:11:44.522246 2026] [security2:error] [pid 1165:tid 1184] [client 172.64.200.100:12787] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:11:44.522246 2026] [security2:error] [pid 1165:tid 1184] [client 172.64.200.100:12787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newyorklifecoach.com"] [uri "/.git/HEAD"] [unique_id "avYBYNG6Z1sNgkL8wsuUCwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:40:00
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:39:54.037071 2026] [security2:error] [pid 25414:tid 25414] [client 172.64.200.100:12115] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:39:54.037071 2026] [security2:error] [pid 25414:tid 25414] [client 172.64.200.100:12115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.z-mgmt.com"] [uri "/.git/HEAD"] [unique_id "avXdynHwBeuPpfPYVaSw1AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 11:05:32
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:05:29.429010 2026] [security2:error] [pid 28424:tid 28424] [client 172.64.200.100:12031] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:05:29.429010 2026] [security2:error] [pid 28424:tid 28424] [client 172.64.200.100:12031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.unicomtechnologies.com"] [uri "/.git/HEAD"] [unique_id "avWdeQOArnq4yv3B9iwKLgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-12 08:00:58
UTC ·
(2 days ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:14:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:14:43.302986 2026] [security2:error] [pid 16994:tid 16994] [client 172.64.200.100:12715] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:14:43.302986 2026] [security2:error] [pid 16994:tid 16994] [client 172.64.200.100:12715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jrpiano.com"] [uri "/.git/HEAD"] [unique_id "avVZUw0ADCmhKGtAgBnQIwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 05:29:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:29:41.767242 2026] [security2:error] [pid 1758:tid 1758] [client 172.64.200.100:13546] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:29:41.767242 2026] [security2:error] [pid 1758:tid 1758] [client 172.64.200.100:13546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cincinnati.deubellzebub.com"] [uri "/.git/config"] [unique_id "avVOxdAd4ent2pdMBCiFMgAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-12 04:34:28
UTC ·
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-11-12 04:19:04
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:18:55.498134 2026] [security2:error] [pid 29220:tid 29220] [client 172.64.200.100:11682] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:18:55.498134 2026] [security2:error] [pid 29220:tid 29220] [client 172.64.200.100:11682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.drgracetomastolentino.com"] [uri "/.git/config"] [unique_id "avU-L2gvqT1LpCVZMzRnEwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 01:15:55
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:15:48.821891 2026] [security2:error] [pid 8584:tid 8584] [client 172.64.200.100:9600] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:15:48.821891 2026] [security2:error] [pid 8584:tid 8584] [client 172.64.200.100:9600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.weather.stricklinranch.com"] [uri "/.git/HEAD"] [unique_id "avUTRFeHOhltiQjqKnGLoQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack