🇦🇺
paulshipley.com.au
2026-11-10 19:51:09
UTC ·
(7 hours ago)
[Wed Nov 11 06:51:09.629085 2026] [security2:error] [pid 277610] [client 172.64.200.186:9687] [client 172.64.200.186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQ ...
show more
[Wed Nov 11 06:51:09.629085 2026] [security2:error] [pid 277610] [client 172.64.200.186:9687] [client 172.64.200.186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.co.nz"] [uri "/.git/config"] [unique_id "avN1raXbsUdhAVxkrLiXFwAAAAc"]
...
show less
Web App Attack
🇮🇹
Inartis
2026-11-10 06:38:31
UTC ·
(21 hours ago)
172.64.200.186 - - [10/Nov/2026:07:38:28 +0100] "GET /.git/config HTTP/2.0" 403 69 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-10 05:02:18
UTC ·
(22 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-10 05:00:03
UTC ·
(22 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:50:51
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:50:44.752968 2026] [security2:error] [pid 24721:tid 24721] [client 172.64.200.186:9996] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:50:44.752968 2026] [security2:error] [pid 24721:tid 24721] [client 172.64.200.186:9996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cityofhaleyville.com"] [uri "/.git/config"] [unique_id "avKGhIF1pURq4_7ZugCS7gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:24:52
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:24:49.078206 2026] [security2:error] [pid 3610:tid 3610] [client 172.64.200.186:10672] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:24:49.078206 2026] [security2:error] [pid 3610:tid 3610] [client 172.64.200.186:10672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lisalehmann.com"] [uri "/.git/config"] [unique_id "avKAcebbyxZYbA_ID6Q6vgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-09 20:15:10
UTC ·
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
Bedios GmbH
2026-11-09 18:51:20
UTC ·
(1 day ago)
Scanning for exposed credentials and private keys.
Hacking
2026-11-09 16:53:11
UTC ·
(1 day ago)
GET /.git/HEAD HTTP/1.1
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:37:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:37:50.290714 2026] [security2:error] [pid 9241:tid 9346] [client 172.64.200.186:12990] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:37:50.290714 2026] [security2:error] [pid 9241:tid 9346] [client 172.64.200.186:12990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.metastrata.com"] [uri "/.git/HEAD"] [unique_id "avHozqfpPE-K5Wsc0F3EaAAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:26:10
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:26:04.071267 2026] [security2:error] [pid 31115:tid 31115] [client 172.64.200.186:10222] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:26:04.071267 2026] [security2:error] [pid 31115:tid 31115] [client 172.64.200.186:10222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.styxwamworld.com"] [uri "/.git/HEAD"] [unique_id "avHX_OxnqqZWGVfW5o9y0AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:45:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:45:14.220738 2026] [security2:error] [pid 14221:tid 14221] [client 172.64.200.186:10342] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:45:14.220738 2026] [security2:error] [pid 14221:tid 14221] [client 172.64.200.186:10342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.amazingwelding.com"] [uri "/.git/HEAD"] [unique_id "avHAWtb5QR7FCdNHK9NUiQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:07:02
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:06:57.402879 2026] [security2:error] [pid 11928:tid 11928] [client 172.64.200.186:12894] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:06:57.402879 2026] [security2:error] [pid 11928:tid 11928] [client 172.64.200.186:12894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grabnerconsulting.com"] [uri "/.git/config"] [unique_id "avG3Ycrv3uFYBaMXuhDW7AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:51:22
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:51:16.399875 2026] [security2:error] [pid 29303:tid 29303] [client 172.64.200.186:13283] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:51:16.399875 2026] [security2:error] [pid 29303:tid 29303] [client 172.64.200.186:13283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.margroberts.com"] [uri "/.git/HEAD"] [unique_id "avGlpMAR5xPvRsuBh-dWJwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:12:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:12:54.532827 2026] [security2:error] [pid 1049:tid 1049] [client 172.64.200.186:14326] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:12:54.532827 2026] [security2:error] [pid 1049:tid 1049] [client 172.64.200.186:14326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tinseltownartificials.com"] [uri "/.git/HEAD"] [unique_id "avGcpqfVbcp5oFB7MytUwQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
