🇳🇱
AutoBlockIP
2026-07-14 04:44:16
(3 days ago)
Suspicious behaviour detected (tcp/993)
Port Scan
Hacking
Brute-Force
🇳🇱
ATV
2025-08-15 03:03:16
(11 months ago)
Unsolicited connection attempts to port 8443
Port Scan
🇺🇸
RAP
2025-08-14 07:59:59
(11 months ago)
2025-08-14 07:59:59 UTC Unauthorized activity to TCP port 8089. Web App
Port Scan
Web App Attack
🇺🇸
MPL
2025-08-14 07:32:05
(11 months ago)
tcp/8888 (2 or more attempts)
Port Scan
🇺🇸
TPI-Abuse
2025-08-01 02:59:32
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 31 22:59:26.368027 2025] [security2:error] [pid 18699:tid 18706] [client 138.68.104.6:58438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newleafpro.com"] [uri "/.git/config"] [unique_id "aIwtjjhvnuT9cGonslaXlwAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-01 02:25:50
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 31 22:25:45.145785 2025] [security2:error] [pid 4751:tid 4751] [client 138.68.104.6:54762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neneh.biz"] [uri "/.git/config"] [unique_id "aIwlqUTEc3MsfAf9qLu9awAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-01 02:20:02
(11 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2025-08-01 02:00:33
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 31 22:00:25.226234 2025] [security2:error] [pid 6985:tid 6985] [client 138.68.104.6:59302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naked60yearoldgaymen.com"] [uri "/.git/config"] [unique_id "aIwfuZUQgl4Jlp_GlRrApAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-01 01:05:06
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 31 21:04:58.056701 2025] [security2:error] [pid 24171:tid 24171] [client 138.68.104.6:53882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naturopathicsource.com"] [uri "/.git/config"] [unique_id "aIwSupN_j9NzdxtKUiozGQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Kashir
2025-08-01 00:45:38
(11 months ago)
Bad bot scanning for app vulnerabilities. Tried to probe non-existent file /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2025-08-01 00:38:18
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 138.68.104.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 31 20:38:12.648301 2025] [security2:error] [pid 23465:tid 23473] [client 138.68.104.6:36990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newyorkplasticsurgery.us"] [uri "/.git/config"] [unique_id "aIwMdJSgbDgVNA7Z8gIbOAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack