🇺🇸
TPI-Abuse
2026-11-10 03:33:13
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:33:06.557462 2026] [security2:error] [pid 20785:tid 20785] [client 172.68.159.136:12845] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:33:06.557462 2026] [security2:error] [pid 20785:tid 20785] [client 172.68.159.136:12845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thongtracker.com"] [uri "/.git/config"] [unique_id "avKQcp30UfGjAAEADXFXtwAAAGI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
shurizma
2026-11-10 03:14:11
UTC ·
(4 hours ago)
[10/Nov/2026:03:14:11 +0000] - 404 404 - GET https thedallasgang.com "/.git/HEAD" [Client 172.68.159.136] [Length 177] [Gzip 3.14] [Sent-to 127.0.0.1] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 ...
show more
[10/Nov/2026:03:14:11 +0000] - 404 404 - GET https thedallasgang.com "/.git/HEAD" [Client 172.68.159.136] [Length 177] [Gzip 3.14] [Sent-to 127.0.0.1] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "-"
...
show less
Web App Attack
Bad Web Bot
🇩🇪
FeG Deutschland
2026-11-09 23:39:46
UTC ·
(8 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇭🇺
bcsaba
2026-11-09 22:24:30
UTC ·
(9 hours ago)
Probing for .git:
172.68.159.136 - - [09/Nov/2026:23:24:27 +0100] "GET /.git/HEAD HTTP/2.0" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇫🇷
Little Iguana
2026-11-09 20:21:54
UTC ·
(11 hours ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇫🇷
Batz
2026-11-09 19:29:06
UTC ·
(12 hours ago)
Automated, Web, Bot, hunting, for, hidden, .env, /, AI, API, Credentials
Port Scan
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-09 19:22:57
UTC ·
(12 hours ago)
[Tue Nov 10 06:22:56.399633 2026] [security2:error] [pid 153628] [client 172.68.159.136:11764] [client 172.68.159.136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/RE ...
show more
[Tue Nov 10 06:22:56.399633 2026] [security2:error] [pid 153628] [client 172.68.159.136:11764] [client 172.68.159.136] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellagiftware.com.au"] [uri "/.git/HEAD"] [unique_id "avIdkOj6NFlebGbfF6uKPAAAAAQ"]
...
show less
Web App Attack
🇧🇪
boxed-it
2026-11-09 18:16:32
UTC ·
(13 hours ago)
GET /.git/HEAD (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:20:26
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:20:20.925287 2026] [security2:error] [pid 30219:tid 30219] [client 172.68.159.136:10615] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:20:20.925287 2026] [security2:error] [pid 30219:tid 30219] [client 172.68.159.136:10615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.grspipes.com"] [uri "/.git/HEAD"] [unique_id "avHktLNlr0XV6350bVJnzQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:36:59
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:36:52.108282 2026] [security2:error] [pid 29961:tid 29961] [client 172.68.159.136:10179] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:36:52.108282 2026] [security2:error] [pid 29961:tid 29961] [client 172.68.159.136:10179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.guardmagic.guardmagic.com"] [uri "/.git/config"] [unique_id "avHMdGLbenBN1Pg2Iq_rtgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hackthetime
2026-11-09 13:05:52
UTC ·
(18 hours ago)
Tried to access .git/config file (`/.git/config`)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:02:22
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:02:16.133803 2026] [security2:error] [pid 7531:tid 7531] [client 172.68.159.136:12472] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:02:16.133803 2026] [security2:error] [pid 7531:tid 7531] [client 172.68.159.136:12472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "donshotrodshop.net"] [uri "/.git/HEAD"] [unique_id "avG2SBeHLXhGaR_delc8nQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:35:49
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:35:45.391966 2026] [security2:error] [pid 11056:tid 11065] [client 172.68.159.136:9601] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:35:45.391966 2026] [security2:error] [pid 11056:tid 11065] [client 172.68.159.136:9601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.crowns.org"] [uri "/.git/config"] [unique_id "avGiAcufRWawCoC3uJVWwgAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:20:10
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:19:57.029613 2026] [security2:error] [pid 13263:tid 13263] [client 172.68.159.136:12838] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:19:57.029613 2026] [security2:error] [pid 13263:tid 13263] [client 172.68.159.136:12838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.itimetable21.com"] [uri "/.git/config"] [unique_id "avGeTdjRNmWiIJezWcAExwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:54:22
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:54:17.647856 2026] [security2:error] [pid 21141:tid 21141] [client 172.68.159.136:12905] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:54:17.647856 2026] [security2:error] [pid 21141:tid 21141] [client 172.68.159.136:12905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rusttheband.com.imagesbyaubrey.com"] [uri "/.git/HEAD"] [unique_id "avGYSXL28fTLWhfi7P0QQgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
