🇺🇸
TPI-Abuse
2026-11-08 12:30:36
UTC ·
(2 hours ago)
(mod_security) mod_security (id:949110) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:30:32.957573 2026] [security2:error] [pid 9272:tid 9272] [client 172.64.200.27:14047] Mod ...
show more
(mod_security) mod_security (id:949110) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:30:32.957573 2026] [security2:error] [pid 9272:tid 9272] [client 172.64.200.27:14047] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "789-bid.net.crazycontrols.com"] [uri "/.git/config"] [unique_id "avBraANnUxNgFtllTqU3OwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Thaliruth
2026-11-08 10:07:12
UTC ·
(4 hours ago)
[08/Nov/2026:11:07:11.531482 +0100] avBJz-nR2ycb7dCajVAnVQAAAEk 172.64.200.27 45756 127.0.0.1 7081
...
Hacking
🇺🇸
TPI-Abuse
2026-11-08 09:57:13
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:57:08.589623 2026] [security2:error] [pid 16643:tid 16643] [client 172.64.200.27:10365] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:57:08.589623 2026] [security2:error] [pid 16643:tid 16643] [client 172.64.200.27:10365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "borzoi-color.borzois.com"] [uri "/.git/config"] [unique_id "avBHdCv4Iqzd0c09w94BRwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2026-11-08 08:29:10
UTC ·
(6 hours ago)
URL scan
Brute-Force
Web App Attack
🇧🇪
boxed-it
2026-11-08 07:50:05
UTC ·
(6 hours ago)
GET /.git/HEAD (Tarpitted for 18s, wasted 1.17kB)
Web App Attack
🇩🇪
HERA - Operations
2026-11-08 05:33:03
UTC ·
(9 hours ago)
bau-arge - searching for vulnerable scripts: config 2026/11/08 06:33:03
Web App Attack
🇫🇮
cleverest.eu
2026-11-08 04:51:09
UTC ·
(9 hours ago)
MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / vcs_probe"}
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:34:40
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:34:34.493381 2026] [security2:error] [pid 32523:tid 32523] [client 172.64.200.27:9716] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:34:34.493381 2026] [security2:error] [pid 32523:tid 32523] [client 172.64.200.27:9716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memelearning.net"] [uri "/.git/config"] [unique_id "au_72gFiRnjLN65k25NLjAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:43:08
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:43:02.371908 2026] [security2:error] [pid 5092:tid 5092] [client 172.64.200.27:9918] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:43:02.371908 2026] [security2:error] [pid 5092:tid 5092] [client 172.64.200.27:9918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leviwalkerportfolio.com"] [uri "/.git/config"] [unique_id "au_vxsEZy8NScJFh1G-8ugAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:12:35
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:12:29.885271 2026] [security2:error] [pid 23458:tid 23458] [client 172.64.200.27:10504] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:12:29.885271 2026] [security2:error] [pid 23458:tid 23458] [client 172.64.200.27:10504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partyfavorsonline.com"] [uri "/.git/HEAD"] [unique_id "au_onQ0w53AG2rj-WMcilAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:51:45
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:51:41.775584 2026] [security2:error] [pid 31183:tid 31183] [client 172.64.200.27:10754] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:51:41.775584 2026] [security2:error] [pid 31183:tid 31183] [client 172.64.200.27:10754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ridorsa.com"] [uri "/.git/config"] [unique_id "au_jvSSO_9X7HVJ-p298gAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:17:34
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:17:30.543186 2026] [security2:error] [pid 2592010:tid 2592039] [client 172.64.200.27:1396 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:17:30.543186 2026] [security2:error] [pid 2592010:tid 2592039] [client 172.64.200.27:13969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "21370.com"] [uri "/.git/HEAD"] [unique_id "au_buh5TPX5jqXfhMdgXEQAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:49:03
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:48:57.387838 2026] [security2:error] [pid 14227:tid 14227] [client 172.64.200.27:10643] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:48:57.387838 2026] [security2:error] [pid 14227:tid 14227] [client 172.64.200.27:10643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wexfordcap.com"] [uri "/.git/config"] [unique_id "au_VCYcszx_qe_ta4aZ-PwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:24:39
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:24:30.527234 2026] [security2:error] [pid 3429:tid 3455] [client 172.64.200.27:10182] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:24:30.527234 2026] [security2:error] [pid 3429:tid 3455] [client 172.64.200.27:10182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eldebslaw.com"] [uri "/.git/HEAD"] [unique_id "au_PTiBYScvQNOfvlZQB4gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:06:52
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:06:48.509694 2026] [security2:error] [pid 15348:tid 15358] [client 172.64.200.27:13211] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:06:48.509694 2026] [security2:error] [pid 15348:tid 15358] [client 172.64.200.27:13211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "streamwriters.com.hdtv55.com"] [uri "/.git/HEAD"] [unique_id "au_LKAo-H0wBiwiuPDt-xgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
