🇺🇸
TPI-Abuse
2026-11-08 09:29:34
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:29:28.948029 2026] [security2:error] [pid 20228:tid 20228] [client 172.68.159.108:13606] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:29:28.948029 2026] [security2:error] [pid 20228:tid 20228] [client 172.68.159.108:13606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menu.pizzadata.com"] [uri "/.git/HEAD"] [unique_id "avBA-CkqnoLNSfXTuMp5OAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 07:35:30
UTC ·
(5 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
francelink.fr
2026-11-08 06:56:28
UTC ·
(6 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T06:54:13.000Z.
Web App Attack
🇩🇪
jbcrn
2026-11-08 06:27:11
UTC ·
(6 hours ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Other, ruleset: cloudflare-worker. Requested honeypot path: /.git/config. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-08 06:14:30
UTC ·
(7 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇳🇱
Alt255
2026-11-08 04:55:38
UTC ·
(8 hours ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.108 - - [08/Nov/2026:05:55:30 +0100] "GET /.git/HEAD HTTP/2.0" 404 402 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.108 - - [08/Nov/2026:05:55:30 +0100] "GET /.git/HEAD HTTP/2.0" 404 402 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:35:39
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:35:32.101282 2026] [security2:error] [pid 10923:tid 10923] [client 172.68.159.108:12234] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:35:32.101282 2026] [security2:error] [pid 10923:tid 10923] [client 172.68.159.108:12234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stlrosesociety.org"] [uri "/.git/HEAD"] [unique_id "au_8FEQ9v2kESoGmmEUaWAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:17:55
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:17:49.901343 2026] [security2:error] [pid 14140:tid 14140] [client 172.68.159.108:10526] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:17:49.901343 2026] [security2:error] [pid 14140:tid 14140] [client 172.68.159.108:10526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.formationone.com"] [uri "/.git/config"] [unique_id "au_37VmYoRXp8rnJ6lGlmgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-08 04:12:13
UTC ·
(9 hours ago)
Scanning for exposed credentials and private keys
Hacking
🇺🇸
TPI-Abuse
2026-11-08 04:00:13
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:00:04.719092 2026] [security2:error] [pid 18012:tid 18012] [client 172.68.159.108:10401] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:00:04.719092 2026] [security2:error] [pid 18012:tid 18012] [client 172.68.159.108:10401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oscarssons.com"] [uri "/.git/config"] [unique_id "au_zxApGR1I9-vZh7pnBYwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:42:30
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:42:22.847237 2026] [security2:error] [pid 24376:tid 24376] [client 172.68.159.108:11806] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:42:22.847237 2026] [security2:error] [pid 24376:tid 24376] [client 172.68.159.108:11806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "interior-cosmetics.com"] [uri "/.git/config"] [unique_id "au_vnj9jmCWRtOo3K4fQRQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:56:48
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:56:41.100950 2026] [security2:error] [pid 12322:tid 12322] [client 172.68.159.108:11664] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:56:41.100950 2026] [security2:error] [pid 12322:tid 12322] [client 172.68.159.108:11664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.bbproductionsonline.com"] [uri "/.git/HEAD"] [unique_id "au_k6T7M-2uCHi7vvGzMuQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:03:06
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:02:59.709789 2026] [security2:error] [pid 19546:tid 19546] [client 172.68.159.108:11392] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:02:59.709789 2026] [security2:error] [pid 19546:tid 19546] [client 172.68.159.108:11392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chubat.com"] [uri "/.git/HEAD"] [unique_id "au_YUz5fUaIShnldnWem2gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-08 01:30:16
UTC ·
(11 hours ago)
"GET /.git/HEAD HTTP/2.0" 403 272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇩🇪
thesimonmanuel
2026-11-08 01:23:04
UTC ·
(12 hours ago)
172.68.159.108 - - [08/Nov/2026:06:53:03 +0530] "GET /.git/HEAD HTTP/2.0" 302 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "2a06:98c0:3600::103"
Web App Attack
