🇺🇸
TPI-Abuse
2026-11-11 10:02:34
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:02:30.059965 2026] [security2:error] [pid 9677:tid 9677] [client 172.69.155.32:13778] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:02:30.059965 2026] [security2:error] [pid 9677:tid 9677] [client 172.69.155.32:13778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.arabou.co"] [uri "/.git/HEAD"] [unique_id "avQ9NsFpDWd7TtCib844cwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-11 05:10:52
UTC ·
(14 hours ago)
[Wed Nov 11 16:10:52.196916 2026] [security2:error] [pid 326211] [client 172.69.155.32:14263] [client 172.69.155.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Wed Nov 11 16:10:52.196916 2026] [security2:error] [pid 326211] [client 172.69.155.32:14263] [client 172.69.155.32] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "talentaymerch.com.au"] [uri "/.git/config"] [unique_id "avP43P3mTNooLrZdR6VZNgAAAAQ"]
...
show less
Web App Attack
Anonymous
2026-11-11 00:13:36
UTC ·
(19 hours ago)
Trying to access config files
Web App Attack
🇫🇷
Little Iguana
2026-11-10 14:17:38
UTC ·
(1 day ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇺🇸
TPI-Abuse
2026-11-10 05:37:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:37:26.559924 2026] [security2:error] [pid 18019:tid 18019] [client 172.69.155.32:13850] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:37:26.559924 2026] [security2:error] [pid 18019:tid 18019] [client 172.69.155.32:13850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.manosentuayuda.imerka.com.mx"] [uri "/.git/HEAD"] [unique_id "avKtlnW2p6Qc3l1HDWr9UwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:59:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:58:58.849377 2026] [security2:error] [pid 8289:tid 8289] [client 172.69.155.32:10134] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:58:58.849377 2026] [security2:error] [pid 8289:tid 8289] [client 172.69.155.32:10134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.smartradios.info"] [uri "/.git/HEAD"] [unique_id "avKkkmK_QKQh-KbnHTIJOQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:51:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:51:39.451415 2026] [security2:error] [pid 13319:tid 13319] [client 172.69.155.32:12067] M ...
show more
(mod_security) mod_security (id:949110) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:51:39.451415 2026] [security2:error] [pid 13319:tid 13319] [client 172.69.155.32:12067] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "lenukuhivabookings.com"] [uri "/.git/HEAD"] [unique_id "avKGuyw8Tdhhu1wUi0hhawAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-11-10 02:24:35
UTC ·
(1 day ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:26:20
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:26:15.616459 2026] [security2:error] [pid 3448:tid 3448] [client 172.69.155.32:13535] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:26:15.616459 2026] [security2:error] [pid 3448:tid 3448] [client 172.69.155.32:13535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jwphotodesign.com"] [uri "/.git/HEAD"] [unique_id "avJyt6v_vyqoCEEjoXnklQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-09 19:51:25
UTC ·
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
NXTwoThou
2026-11-09 19:15:45
UTC ·
(2 days ago)
/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 17:14:52
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:14:47.488373 2026] [security2:error] [pid 2058:tid 2058] [client 172.69.155.32:12088] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:14:47.488373 2026] [security2:error] [pid 2058:tid 2058] [client 172.69.155.32:12088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kountz.org"] [uri "/.git/HEAD"] [unique_id "avH_h-QghjbEIp57c2rdMAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-09 12:08:06
UTC ·
(2 days ago)
Scanning for exposed credentials and private keys
Hacking
🇺🇸
TPI-Abuse
2026-11-09 12:02:25
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:02:20.020947 2026] [security2:error] [pid 6682:tid 6682] [client 172.69.155.32:9800] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:02:20.020947 2026] [security2:error] [pid 6682:tid 6682] [client 172.69.155.32:9800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.noxiousthoughts.com"] [uri "/.git/config"] [unique_id "avG2TBx-vraqJZFWIrdrYAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:39:44
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:39:39.692285 2026] [security2:error] [pid 20700:tid 20700] [client 172.69.155.32:11051] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:39:39.692285 2026] [security2:error] [pid 20700:tid 20700] [client 172.69.155.32:11051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rendermatrix.com"] [uri "/.git/HEAD"] [unique_id "avGGy2YZLrDUEKbuEQ42UwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack