🇺🇸
anon333
2025-07-28 22:33:49
(1 year ago)
Hacker syslog review 1753742029
Hacking
🇺🇸
Jimbocous
2025-07-28 20:47:00
(1 year ago)
138.68.182.42 - - [28/Jul/2025:14:21:35 -0600] "GET /.git/config HTTP/1.1" 421 3252 "-" "Mozilla/5.0 ...
show more
138.68.182.42 - - [28/Jul/2025:14:21:35 -0600] "GET /.git/config HTTP/1.1" 421 3252 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
138.124.183.100 - - [28/Jul/2025:14:43:38 -0600] "GET / HTTP/1.1" 421 3006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36"
Unauthorised access attempts. Probing for known web app vulnerabilities.
show less
Hacking
Web App Attack
🇺🇸
Bruce5051
2025-07-28 20:31:16
(1 year ago)
138.68.182.42 - - [28/Jul/2025:13:31:16 -0700] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X ...
show more
138.68.182.42 - - [28/Jul/2025:13:31:16 -0700] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ut-addicted.com
2025-07-28 20:06:11
(1 year ago)
\[Mon Jul 28 22:06:09.261580 2025\] \[:error\] \[pid 12036:tid 140572229609216\] \[client 138.68.182 ...
show more
\[Mon Jul 28 22:06:09.261580 2025\] \[:error\] \[pid 12036:tid 140572229609216\] \[client 138.68.182.42:36272\] \[client 138.68.182.42\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.git/config"\] \[unique_id "aIfYMa7h8mmVK01IgBuQHwAAAMA"\]
show less
Brute-Force
Web App Attack
🇨🇴
j458rjqwi348fhjq46
2025-07-28 20:01:24
(1 year ago)
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extende ...
show more
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extended rules), Suspicious short random path, Suspicious path: /t4 (+2 more). Activity: 61 requests to 15 URLs. Period: 2025-07-28 14:27:11 - 2025-07-28 14:27:10 (America/Bogota). Origin: GB. Source: Automated WAF log analysis.
show less
Hacking
Web App Attack
🇱🇻
instant
2025-07-28 20:01:16
(1 year ago)
28.07.2025 20:01:16 Git repository scan (/.git)
Hacking
Web App Attack
2025-07-28 19:53:14
(1 year ago)
138.68.182.42 - - [28/Jul/2025:21:53:14 +0200] "GET /.git/config HTTP/1.1" 403 400 "-" "Mozilla/5.0 ...
show more
138.68.182.42 - - [28/Jul/2025:21:53:14 +0200] "GET /.git/config HTTP/1.1" 403 400 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack
🇦🇱
router.al
2025-07-28 19:41:46
(1 year ago)
07/28/2025-19:41:45.936646 138.68.182.42 Protocol: 6 GPL WEB_SERVER 403 Forbidden
Port Scan
🇺🇸
TPI-Abuse
2025-07-28 19:33:32
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 138.68.182.42 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 138.68.182.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 15:33:27.111371 2025] [security2:error] [pid 2020157:tid 2020157] [client 138.68.182.42:58144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.117.112.231"] [uri "/.git/config"] [unique_id "aIfQh4dI9OhoD65RReUhDAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Shadymint
2025-07-28 19:30:00
(1 year ago)
url probing from IP marked as abusive
Web App Attack
🇫🇷
breubit
2025-07-28 19:29:47
(1 year ago)
138.68.182.42 - - [28/Jul/2025:21:29:47 +0200] "GET /.git/config HTTP/1.1" 404 492 "-" "Mozilla/5.0 ...
show more
138.68.182.42 - - [28/Jul/2025:21:29:47 +0200] "GET /.git/config HTTP/1.1" 404 492 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack
🇬🇧
essinghigh
2025-04-25 09:56:33
(1 year ago)
IPS Detection: 138.68.182.42 -> DPT: 8090
Port Scan
🇿🇦
IrisFlower
2022-12-03 05:55:36
(3 years ago)
Unauthorized connection attempt detected from IP address 138.68.182.42 to port 3000 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2022-12-03 05:27:12
(3 years ago)
Unauthorized connection attempt detected from IP address 138.68.182.42 to port 3000 [J]
Port Scan
Hacking
🇺🇸
MPL
2022-12-03 05:23:31
(3 years ago)
tcp/3000
Port Scan