🇺🇸
TPI-Abuse
2026-11-08 08:04:17
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:04:10.054585 2026] [security2:error] [pid 20638:tid 20638] [client 172.64.200.9:13291] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:04:10.054585 2026] [security2:error] [pid 20638:tid 20638] [client 172.64.200.9:13291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "productosdelimpiezamagiccleannayarit.com.spyasociados.com"] [uri "/.git/HEAD"] [unique_id "avAs-uuzanTNhjkePEYvtgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-08 06:42:36
UTC ·
(2 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:24:34
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:24:27.127381 2026] [security2:error] [pid 15955:tid 15955] [client 172.64.200.9:9530] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:24:27.127381 2026] [security2:error] [pid 15955:tid 15955] [client 172.64.200.9:9530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frankpollicino.com"] [uri "/.git/HEAD"] [unique_id "au_dW2kx36dF94lqZUMCEgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:59:01
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:58:52.777093 2026] [security2:error] [pid 22630:tid 22630] [client 172.64.200.9:12723] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:58:52.777093 2026] [security2:error] [pid 22630:tid 22630] [client 172.64.200.9:12723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesallenwalker.com"] [uri "/.git/config"] [unique_id "au_XXA3z-lZtgziXD77QjwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:56:33
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:56:29.931083 2026] [security2:error] [pid 10316:tid 10316] [client 172.64.200.9:11112] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:56:29.931083 2026] [security2:error] [pid 10316:tid 10316] [client 172.64.200.9:11112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enrimejia.com"] [uri "/.git/config"] [unique_id "au_IvXnjBgX70qkj50tjXAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-11-07 08:20:08
UTC ·
(1 day ago)
172.64.200.9 - - [07/Nov/2026:10:20:08 +0200] "GET /.env HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-04 00:35:01
UTC ·
(4 days ago)
[04/Nov/2026:02:35:00 +0200] -- 172.64.200.9 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-03 10:37:29
UTC ·
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T10:36:03.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 17:26:57
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:26:51.795762 2026] [security2:error] [pid 1592706:tid 1592732] [client 172.64.200.9:12164] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:26:51.795762 2026] [security2:error] [pid 1592706:tid 1592732] [client 172.64.200.9:12164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accreditedprojectmanager.com.aafm.us"] [uri "/.git/HEAD"] [unique_id "aujH22icHDFxNRWRdidMwwAAAZc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-11-02 14:32:56
UTC ·
(5 days ago)
172.64.200.9 - - [02/Nov/2026:16:32:56 +0200] "GET /.git/config HTTP/2.0" 404 1852 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 01:14:30
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:14:24.314930 2026] [security2:error] [pid 8698:tid 8698] [client 172.64.200.9:11332] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:14:24.314930 2026] [security2:error] [pid 8698:tid 8698] [client 172.64.200.9:11332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marcedinc.com.gabver.com"] [uri "/.git/config"] [unique_id "aufj8CawQyUCGDMKGHNtawAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 22:57:38
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 17:57:31.626830 2026] [security2:error] [pid 17529:tid 17529] [client 172.64.200.9:9337] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 17:57:31.626830 2026] [security2:error] [pid 17529:tid 17529] [client 172.64.200.9:9337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cemesur-vision21.com"] [uri "/.git/config"] [unique_id "aufD20pWQY8RPiZBgJTcqQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 16:22:37
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:22:31.611374 2026] [security2:error] [pid 9886:tid 9886] [client 172.64.200.9:12587] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:22:31.611374 2026] [security2:error] [pid 9886:tid 9886] [client 172.64.200.9:12587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wvbigdaddy.summitmediawv.com"] [uri "/.git/HEAD"] [unique_id "audnR0wt7gYfyGQvf2BvwgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 08:18:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:18:06.502288 2026] [security2:error] [pid 27627:tid 27627] [client 172.64.200.9:12503] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.200.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:18:06.502288 2026] [security2:error] [pid 27627:tid 27627] [client 172.64.200.9:12503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinkrays.michaelholdengc.com"] [uri "/.git/HEAD"] [unique_id "aub1vlg0oU7xQSio0BWW6gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-10-30 16:41:32
UTC ·
(1 week ago)
172.64.200.9 - - [30/Oct/2026:18:41:31 +0200] "GET /wp-json/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0"
...
Hacking
Web App Attack
