🇨🇭
TheCoon
2026-11-10 06:06:23
UTC ·
(4 hours ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-10 05:50:24
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:50:17.033349 2026] [security2:error] [pid 31381:tid 31381] [client 172.69.155.197:11031] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:50:17.033349 2026] [security2:error] [pid 31381:tid 31381] [client 172.69.155.197:11031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.difusionens.org"] [uri "/.git/config"] [unique_id "avKwmRVDgG1BMFDdf7foBQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-10 04:46:23
UTC ·
(5 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T04:45:01.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:59:37
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:59:33.669325 2026] [security2:error] [pid 28480:tid 28480] [client 172.69.155.197:12471] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:59:33.669325 2026] [security2:error] [pid 28480:tid 28480] [client 172.69.155.197:12471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wethepeoplealliance.org"] [uri "/.git/HEAD"] [unique_id "avKWpaVwcqgXYUXlbDpcyAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:27:59
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:27:56.048037 2026] [security2:error] [pid 4488:tid 4488] [client 172.69.155.197:14000] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:27:56.048037 2026] [security2:error] [pid 4488:tid 4488] [client 172.69.155.197:14000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laydox.com"] [uri "/.git/config"] [unique_id "avKPPHAiuiqzHyi18SpHVAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-10 03:10:52
UTC ·
(7 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:47:12
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:47:08.736442 2026] [security2:error] [pid 5840:tid 5840] [client 172.69.155.197:12850] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:47:08.736442 2026] [security2:error] [pid 5840:tid 5840] [client 172.69.155.197:12850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foxmm.com"] [uri "/.git/config"] [unique_id "avKFrNrx4fTeFtUmsogZiwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
cleverest.eu
2026-11-10 01:59:10
UTC ·
(8 hours ago)
MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / vcs_probe"}
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:20:04
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:19:54.914852 2026] [security2:error] [pid 15927:tid 15927] [client 172.69.155.197:12486] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:19:54.914852 2026] [security2:error] [pid 15927:tid 15927] [client 172.69.155.197:12486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sabras.com"] [uri "/.git/HEAD"] [unique_id "avJjKgVPRMwSdj8U05ZMUQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-11-09 17:25:13
UTC ·
(17 hours ago)
172.69.155.197 - - [09/Nov/2026:19:25:12 +0200] "GET /.git/HEAD HTTP/2.0" 400 21568 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 17:17:47
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:17:40.227298 2026] [security2:error] [pid 21309:tid 21309] [client 172.69.155.197:9472] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:17:40.227298 2026] [security2:error] [pid 21309:tid 21309] [client 172.69.155.197:9472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.infinite-fitness.com"] [uri "/.git/HEAD"] [unique_id "avIANI47iQrN8iu3Cd31JgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:19:02
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:18:56.075298 2026] [security2:error] [pid 19408:tid 19408] [client 172.69.155.197:9520] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:18:56.075298 2026] [security2:error] [pid 19408:tid 19408] [client 172.69.155.197:9520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.unitedwestandent.org"] [uri "/.git/HEAD"] [unique_id "avHycElADGQaX4N94h9frAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:48:24
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:48:16.963281 2026] [security2:error] [pid 27202:tid 27202] [client 172.69.155.197:10484] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:48:16.963281 2026] [security2:error] [pid 27202:tid 27202] [client 172.69.155.197:10484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.buffalogunsaz.com.compliancedepts.com"] [uri "/.git/HEAD"] [unique_id "avHrQEZRfED5bZGI3UL-RQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:14:19
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:14:11.672158 2026] [security2:error] [pid 11817:tid 11817] [client 172.69.155.197:12525] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:14:11.672158 2026] [security2:error] [pid 11817:tid 11817] [client 172.69.155.197:12525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.casaniagara.com.mx"] [uri "/.git/config"] [unique_id "avHjQ7jY9K5JCooZcImF5QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:55:52
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:55:48.028513 2026] [security2:error] [pid 17108:tid 17108] [client 172.69.155.197:11803] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:55:48.028513 2026] [security2:error] [pid 17108:tid 17108] [client 172.69.155.197:11803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pinebrookdesign.com"] [uri "/.git/config"] [unique_id "avHQ5Otpfb6AisKceZme-AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack