🇺🇸
TPI-Abuse
2026-11-09 13:27:37
UTC ·
(46 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:27:33.613351 2026] [security2:error] [pid 23968:tid 23968] [client 172.64.200.156:10938] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:27:33.613351 2026] [security2:error] [pid 23968:tid 23968] [client 172.64.200.156:10938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sizefinder.com"] [uri "/.git/config"] [unique_id "avHKRR3Egk-d8d3DmcVpYQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:13:31
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:13:28.130459 2026] [security2:error] [pid 1724:tid 1724] [client 172.64.200.156:12210] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:13:28.130459 2026] [security2:error] [pid 1724:tid 1724] [client 172.64.200.156:12210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jcsforwarding.com"] [uri "/.git/HEAD"] [unique_id "avGq2L21aJXsgDPSKNvMJQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:27:50
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:27:45.184827 2026] [security2:error] [pid 22223:tid 22223] [client 172.64.200.156:9919] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:27:45.184827 2026] [security2:error] [pid 22223:tid 22223] [client 172.64.200.156:9919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mvpbees.com"] [uri "/.git/HEAD"] [unique_id "avGEATE9qkJfjzUrSVgU6gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:06:03
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:05:59.923469 2026] [security2:error] [pid 20223:tid 20223] [client 172.64.200.156:13411] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:05:59.923469 2026] [security2:error] [pid 20223:tid 20223] [client 172.64.200.156:13411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.colbygrenier.com"] [uri "/.git/config"] [unique_id "avF-50xtwJds0-uzU7-J1wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-11-09 07:19:38
UTC ·
(6 hours ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-09 06:20:38
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:20:34.065343 2026] [security2:error] [pid 23281:tid 23281] [client 172.64.200.156:12958] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:20:34.065343 2026] [security2:error] [pid 23281:tid 23281] [client 172.64.200.156:12958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfpantry.noshsf.com"] [uri "/.git/config"] [unique_id "avFmMv6dox5SIgrJJvOGEQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-11-09 04:34:23
UTC ·
(9 hours ago)
/.git/config
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:32:03
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:31:59.737816 2026] [security2:error] [pid 2369:tid 2369] [client 172.64.200.156:13377] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:31:59.737816 2026] [security2:error] [pid 2369:tid 2369] [client 172.64.200.156:13377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sympalais.com"] [uri "/.git/HEAD"] [unique_id "avFMv1G4ciGstS9QmeT96QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:52:45
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:52:39.589958 2026] [security2:error] [pid 9447:tid 9447] [client 172.64.200.156:14178] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:52:39.589958 2026] [security2:error] [pid 9447:tid 9447] [client 172.64.200.156:14178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.manb.org"] [uri "/.git/HEAD"] [unique_id "avFDhzr-5R78TJDNg8n2hgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:09:15
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:09:09.050591 2026] [security2:error] [pid 3205:tid 3205] [client 172.64.200.156:14311] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:09:09.050591 2026] [security2:error] [pid 3205:tid 3205] [client 172.64.200.156:14311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.hydrogenplus.net"] [uri "/.git/HEAD"] [unique_id "avE5Vd9m1BsJZIqTYvEq9AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-11-09 03:04:28
UTC ·
(11 hours ago)
172.64.200.156 - - [09/Nov/2026:04:04:27 +0100] "GET /.git/config HTTP/1.1" 404 5662 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Port Scan
Brute-Force
🇺🇸
TPI-Abuse
2026-11-09 02:39:33
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:39:28.715982 2026] [security2:error] [pid 27954:tid 27954] [client 172.64.200.156:11592] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:39:28.715982 2026] [security2:error] [pid 27954:tid 27954] [client 172.64.200.156:11592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americancryonics.org"] [uri "/.git/HEAD"] [unique_id "avEyYBPITNCOpUsseUppNQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-09 02:27:23
UTC ·
(11 hours ago)
[09/Nov/2026:04:27:23 +0200] -- 172.64.200.156 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:20:32
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:20:25.528283 2026] [security2:error] [pid 21109:tid 21109] [client 172.64.200.156:12075] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:20:25.528283 2026] [security2:error] [pid 21109:tid 21109] [client 172.64.200.156:12075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.brokenglasstelecom.com"] [uri "/.git/HEAD"] [unique_id "avEt6Wg0JfIBFIJV0JqprgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:53:16
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:53:09.475079 2026] [security2:error] [pid 27639:tid 27639] [client 172.64.200.156:13772] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:53:09.475079 2026] [security2:error] [pid 27639:tid 27639] [client 172.64.200.156:13772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.seize-the-season.com"] [uri "/.git/HEAD"] [unique_id "avEnhU3OBtS93OwkYE5dwgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
