2026-11-10 20:31:42
UTC ·
(6 hours ago)
jails=sensitive-probe; categories=14,21; events=1; first=2026-11-10T20:31:42Z; last=2026-11-10T20:31:42Z
Port Scan
Web App Attack
🇨🇿
sajmon0011
2026-11-10 15:27:45
UTC ·
(11 hours ago)
172.64.200.51 - - [10/Nov/2026:16:27:45 +0100] "GET /.git/config HTTP/2.0" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Web App Attack
🇩🇪
FeG Deutschland
2026-11-10 14:56:07
UTC ·
(12 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:28:09
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:28:04.689382 2026] [security2:error] [pid 28314:tid 28314] [client 172.64.200.51:11284] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:28:04.689382 2026] [security2:error] [pid 28314:tid 28314] [client 172.64.200.51:11284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "l3prime.systemcapacityoptimization.com"] [uri "/.git/config"] [unique_id "avLHhBoUFrN-ln6VNRe6bwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:52:29
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:52:22.944364 2026] [security2:error] [pid 23279:tid 23279] [client 172.64.200.51:11419] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:52:22.944364 2026] [security2:error] [pid 23279:tid 23279] [client 172.64.200.51:11419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.teenybikini.com"] [uri "/.git/HEAD"] [unique_id "avKxFozvQoYn3HpejxqCCwAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Little Iguana
2026-11-10 04:45:10
UTC ·
(22 hours ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇳🇱
ipoac.nl
2026-11-10 04:34:37
UTC ·
(22 hours ago)
-.nl:443 172.64.200.51 - - [10/Nov/2026:05:34:37 +0100] -.nl "GET /.git/config HTTP/2.0" 404 2279 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
🇩🇪
altenglaner
2026-11-10 04:31:02
UTC ·
(22 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:09:27
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:09:19.818333 2026] [security2:error] [pid 20982:tid 20982] [client 172.64.200.51:12015] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:09:19.818333 2026] [security2:error] [pid 20982:tid 20982] [client 172.64.200.51:12015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title16.com"] [uri "/.git/config"] [unique_id "avKK32_3voBYN-aXP_f8JwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:43:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:43:27.134774 2026] [security2:error] [pid 17998:tid 17998] [client 172.64.200.51:12347] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:43:27.134774 2026] [security2:error] [pid 17998:tid 17998] [client 172.64.200.51:12347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "happybookermusic.com"] [uri "/.git/config"] [unique_id "avKEz66Crmth4ECtok18ogAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
shurizma
2026-11-10 01:55:37
UTC ·
(1 day ago)
[10/Nov/2026:01:55:37 +0000] - 404 404 - GET https pelican.shuri.gg "/.git/config" [Client 172.64.200.51] [Length 3194] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0" "-"
...
Web App Attack
Bad Web Bot
🇺🇸
francelink.fr
2026-11-10 00:12:22
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T13:22:59.000Z.
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-09 21:34:00
UTC ·
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:56:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:56:53.793429 2026] [security2:error] [pid 26962:tid 26962] [client 172.64.200.51:9634] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:56:53.793429 2026] [security2:error] [pid 26962:tid 26962] [client 172.64.200.51:9634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.tonytremblayauthor.com"] [uri "/.git/HEAD"] [unique_id "avH7Veq4-BerJEg-n75mgwAAAH0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:55:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:55:00.706902 2026] [security2:error] [pid 13354:tid 13354] [client 172.64.200.51:10586] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:55:00.706902 2026] [security2:error] [pid 13354:tid 13354] [client 172.64.200.51:10586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.volunteergems.com"] [uri "/.git/HEAD"] [unique_id "avHs1C26hIU0rthQwS1BiAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
