🇺🇸
TPI-Abuse
2026-11-09 15:03:56
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:03:50.553562 2026] [security2:error] [pid 29461:tid 29461] [client 172.64.200.137:11564] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:03:50.553562 2026] [security2:error] [pid 29461:tid 29461] [client 172.64.200.137:11564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehealthcontent.com"] [uri "/.git/config"] [unique_id "avHg1hjeuEIMd0h9pYRTGAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:03:47
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:03:43.341922 2026] [security2:error] [pid 24007:tid 24007] [client 172.64.200.137:10512] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:03:43.341922 2026] [security2:error] [pid 24007:tid 24007] [client 172.64.200.137:10512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.volunteergems.com"] [uri "/.git/config"] [unique_id "avHSv-o-eTf6pbaJ6M74pgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:24:22
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:24:14.976364 2026] [security2:error] [pid 17170:tid 17170] [client 172.64.200.137:11611] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:24:14.976364 2026] [security2:error] [pid 17170:tid 17170] [client 172.64.200.137:11611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casinoaffiliateprogramsonline.com.crazycoin.net"] [uri "/.git/config"] [unique_id "avGtXh6L4FbCqKYtBsv0EQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:10:48
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:10:42.477028 2026] [security2:error] [pid 19544:tid 19544] [client 172.64.200.137:9890] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:10:42.477028 2026] [security2:error] [pid 19544:tid 19544] [client 172.64.200.137:9890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.engelhardtkraatz.com"] [uri "/.git/config"] [unique_id "avGOEvTBoWDn4q2d955orgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:13:26
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:13:20.405059 2026] [security2:error] [pid 14894:tid 14894] [client 172.64.200.137:12346] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:13:20.405059 2026] [security2:error] [pid 14894:tid 14894] [client 172.64.200.137:12346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accordionstars.com.accordionclub.org"] [uri "/.git/HEAD"] [unique_id "avGAoCLrjGGrcRylucWpfgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CBJ
2026-11-09 06:56:11
UTC ·
(11 hours ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇩🇪
altenglaner
2026-11-09 06:30:40
UTC ·
(12 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:18:46
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:18:38.844552 2026] [security2:error] [pid 21569:tid 21569] [client 172.64.200.137:10194] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:18:38.844552 2026] [security2:error] [pid 21569:tid 21569] [client 172.64.200.137:10194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.daisydoesoap.com"] [uri "/.git/HEAD"] [unique_id "avFXrolRABE2W4AtN5qqhAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:24:45
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:24:42.095839 2026] [security2:error] [pid 22760:tid 22760] [client 172.64.200.137:11108] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:24:42.095839 2026] [security2:error] [pid 22760:tid 22760] [client 172.64.200.137:11108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ictsl.net"] [uri "/.git/config"] [unique_id "avFLChRIDIq25ysDEXejZwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
Juha Jurvanen
2026-11-09 04:17:33
UTC ·
(14 hours ago)
Blocked by Scantide Guard on iis-rdweb-protection. Rule: Immediate HTTP block: high-confidence web attack pattern matched '*/.git/config*'..
Brute-Force
🇺🇸
TPI-Abuse
2026-11-09 02:53:51
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:53:44.398871 2026] [security2:error] [pid 10086:tid 10122] [client 172.64.200.137:10390] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:53:44.398871 2026] [security2:error] [pid 10086:tid 10122] [client 172.64.200.137:10390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bestofthis.com"] [uri "/.git/config"] [unique_id "avE1uA22S5mJEATr38kqNgAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:12:39
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:12:32.035811 2026] [security2:error] [pid 11768:tid 11768] [client 172.64.200.137:9241] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:12:32.035811 2026] [security2:error] [pid 11768:tid 11768] [client 172.64.200.137:9241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.miranda-race-walks.com"] [uri "/.git/HEAD"] [unique_id "avEeANaZrexeSoPtVboVkwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 01:02:57
UTC ·
(17 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:06:06
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:05:58.805306 2026] [security2:error] [pid 32366:tid 32366] [client 172.64.200.137:11832] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:05:58.805306 2026] [security2:error] [pid 32366:tid 32366] [client 172.64.200.137:11832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.therennas.com"] [uri "/.git/config"] [unique_id "avEOZurnrOYW8FWYI6vIEgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-08 23:59:56
UTC ·
(18 hours ago)
[MonNov0900:59:51.0357762026][security2:error][pid1917734:tid1917959][client172.64.200.137:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"9607 ...
show more
[MonNov0900:59:51.0357762026][security2:error][pid1917734:tid1917959][client172.64.200.137:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpanel.verticalti.ch\"][uri\"/.git/HEAD\"][unique_id\"avEM9zePy5TW9PvKEDSqCQAAAQo\"]
show less
Hacking
Web App Attack
