🇺🇸
TPI-Abuse
2026-11-08 12:01:15
UTC ·
(55 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:01:12.077310 2026] [security2:error] [pid 10498:tid 10498] [client 172.64.200.85:11008] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:01:12.077310 2026] [security2:error] [pid 10498:tid 10498] [client 172.64.200.85:11008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karieva.explorediablo.com"] [uri "/.git/HEAD"] [unique_id "avBkiH6X9vo_KnUuhD7yIAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
thesimonmanuel
2026-11-08 10:23:22
UTC ·
(2 hours ago)
172.64.200.85 - - [08/Nov/2026:15:53:20 +0530] "GET /.git/config HTTP/2.0" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0" "2a06:98c0:3600::103"
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-08 09:15:09
UTC ·
(3 hours ago)
[08/Nov/2026:11:04:27 +0200] -- 172.64.200.85 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 06:53:40
UTC ·
(6 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
thesimonmanuel
2026-11-08 03:26:56
UTC ·
(9 hours ago)
172.64.200.85 - - [08/Nov/2026:08:56:55 +0530] "GET /.git/HEAD HTTP/2.0" 404 132 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "172.64.200.85"
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:02:11
UTC ·
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-04 19:27:42
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 14:27:38.321702 2026] [security2:error] [pid 557:tid 557] [client 172.64.200.85:12576] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 14:27:38.321702 2026] [security2:error] [pid 557:tid 557] [client 172.64.200.85:12576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.echelonts.com"] [uri "/.git/HEAD"] [unique_id "auuHKpe9wtnfCKnZhBXe9gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-04 11:44:20
UTC ·
(4 days ago)
[WedNov0412:44:13.9040682026][security2:error][pid3347310:tid3347399][client172.64.200.85:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"96072 ...
show more
[WedNov0412:44:13.9040682026][security2:error][pid3347310:tid3347399][client172.64.200.85:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.annunci-ticino.ch\"][uri\"/.git/config\"][unique_id\"ausajToSUriLzGsh_JO-ZAAAAME\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 17:28:58
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:28:55.565583 2026] [security2:error] [pid 24897:tid 24897] [client 172.64.200.85:9788] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:28:55.565583 2026] [security2:error] [pid 24897:tid 24897] [client 172.64.200.85:9788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biblioteca.navarrete.ws"] [uri "/.git/HEAD"] [unique_id "aujIV9zpdOTmBppZwBnuBwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 20:48:39
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:48:32.885159 2026] [security2:error] [pid 32362:tid 32378] [client 172.64.200.85:13821] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:48:32.885159 2026] [security2:error] [pid 32362:tid 32378] [client 172.64.200.85:13821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynosurelandscapers.cynosureinternetservices.com"] [uri "/.git/HEAD"] [unique_id "aueloJ5oBJOiBBcn8i4x_gAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 15:17:48
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 10:17:43.442630 2026] [security2:error] [pid 24407:tid 24407] [client 172.64.200.85:9837] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 10:17:43.442630 2026] [security2:error] [pid 24407:tid 24407] [client 172.64.200.85:9837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frelsburg.com.cajunfriedturkey.com"] [uri "/.git/config"] [unique_id "audYF8oupTEk7BGqqOYDhAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 10:30:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 05:30:45.036986 2026] [security2:error] [pid 26913:tid 26938] [client 172.64.200.85:9537] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 05:30:45.036986 2026] [security2:error] [pid 26913:tid 26938] [client 172.64.200.85:9537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwa.evan-hotel.com"] [uri "/.git/HEAD"] [unique_id "aucU1YknfSOsRcTRNNUDngAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 09:01:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:01:38.325947 2026] [security2:error] [pid 4810:tid 4810] [client 172.64.200.85:9443] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:01:38.325947 2026] [security2:error] [pid 4810:tid 4810] [client 172.64.200.85:9443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeremyurbanski.buffaloweddingdeejay.com"] [uri "/.git/HEAD"] [unique_id "aub_8tPYycF8A4hKWaMRlAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 06:46:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:46:14.423063 2026] [security2:error] [pid 1690031:tid 1690031] [client 172.64.200.85:1221 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:46:14.423063 2026] [security2:error] [pid 1690031:tid 1690031] [client 172.64.200.85:12211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-cyprus.com.yacht-register-holland.com"] [uri "/.git/HEAD"] [unique_id "aubgNgqRXy6KuQDHXpUIHgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-10-27 12:43:20
UTC ·
(1 week ago)
172.64.200.85 - - [27/Oct/2026:14:43:16 +0200] "GET /wordpress/wp-json/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0"
...
Hacking
Web App Attack
