🇺🇸
sandra361
2026-10-16 12:06:49
(1 day ago)
Port scan detected: 9 attempts across 1 port (443). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=64.205.112 ...
show more
Port scan detected: 9 attempts across 1 port (443). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=64.205.112.102 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=37566 DF PROTO=TCP SPT=35938 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-16 11:57:20
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:57:13.652179 2026] [security2:error] [pid 11641:tid 11641] [client 64.205.112.102:46748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.unitoolsupplies.com"] [uri "/.git/info/refs"] [unique_id "atIRGVdKh8n9GxW2L437HwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 10:10:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:10:30.861340 2026] [security2:error] [pid 21005:tid 21005] [client 64.205.112.102:43258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sailinghonu.com"] [uri "/.git/info/refs"] [unique_id "atH4Fidh3VnQQtq20Eqd3QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 06:22:36
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:22:29.310886 2026] [security2:error] [pid 10873:tid 10873] [client 64.205.112.102:57186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotdamnsam.com"] [uri "/.git/info/refs"] [unique_id "atHCpfxC0ZyP1rTYdMMMuQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 05:47:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:47:45.570754 2026] [security2:error] [pid 8515:tid 8515] [client 64.205.112.102:32800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gisur.com"] [uri "/.git/info/refs"] [unique_id "atG6gZD8rbVubONs1NDvQQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-16 03:14:24
(2 days ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 64.205.112.102 - - [16/Oct/2026:05:14:12 +0200] "GET /.git/info/refs?service=git-upload-pack HTTP/2.0" 404 46405 "-" "git/2.53.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-16 03:05:43
(2 days ago)
Abuse Detected (29)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 00:10:15
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:10:10.623309 2026] [security2:error] [pid 30871:tid 30871] [client 64.205.112.102:52600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.susanleeward.com"] [uri "/.git/info/refs"] [unique_id "atFrYnbEg10EnH4AyulvkAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 23:47:28
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:47:21.828043 2026] [security2:error] [pid 18942:tid 18942] [client 64.205.112.102:39238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solucionesmercadeodigital.com"] [uri "/.git/info/refs"] [unique_id "atFmCQvSjKznqLn3KnvuzAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 23:30:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:30:06.127983 2026] [security2:error] [pid 30349:tid 30349] [client 64.205.112.102:59666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.serviciodepinturadecasas.com"] [uri "/.git/info/refs"] [unique_id "atFh_j3xeKcJ1CeoGrvRVwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 19:33:31
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 15:33:24.350789 2026] [security2:error] [pid 12768:tid 12768] [client 64.205.112.102:47724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "itaxcenter.com"] [uri "/.git/info/refs"] [unique_id "atEqhHXw0DM23O_3h9SfzQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 15:47:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:47:01.756184 2026] [security2:error] [pid 8573:tid 8573] [client 64.205.112.102:56020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blacktvnow.com"] [uri "/.git/info/refs"] [unique_id "atD1daw8C0C4v2JFCpFssQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 15:08:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:08:39.772771 2026] [security2:error] [pid 5563:tid 5563] [client 64.205.112.102:53726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.apfarrell.com"] [uri "/.git/info/refs"] [unique_id "atDsd7xqG5xOkerx6qJZuwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-14 20:05:37
(3 days ago)
Abuse Detected (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 18:43:39
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 64.205.112.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:43:31.989707 2026] [security2:error] [pid 22084:tid 22084] [client 64.205.112.102:48828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fadedsage.com"] [uri "/.git/info/refs"] [unique_id "as_NU6Z59-xacmF6HCM1NAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
