🇫🇷
mail.avx.gr
2026-11-08 11:40:26
UTC ·
(48 minutes ago)
plesk-rapid-ban sensitive-file-probe host=syfax.paladin.gr
Hacking
🇺🇸
TPI-Abuse
2026-11-08 11:10:49
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:10:42.895780 2026] [security2:error] [pid 7295:tid 7295] [client 172.68.159.167:12948] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:10:42.895780 2026] [security2:error] [pid 7295:tid 7295] [client 172.68.159.167:12948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.baptismnapkins.com"] [uri "/.git/config"] [unique_id "avBYsmvAD9JsPJ2dnrWsYAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 06:33:03
UTC ·
(5 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 06:25:18
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:25:13.733811 2026] [security2:error] [pid 5019:tid 5019] [client 172.68.159.167:10286] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:25:13.733811 2026] [security2:error] [pid 5019:tid 5019] [client 172.68.159.167:10286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afjm.info"] [uri "/.git/HEAD"] [unique_id "avAVyUgGAL1AO67ppRX8OAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:02:20
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:02:14.065614 2026] [security2:error] [pid 26324:tid 26324] [client 172.68.159.167:13374] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:02:14.065614 2026] [security2:error] [pid 26324:tid 26324] [client 172.68.159.167:13374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bahamascruisersguide.com"] [uri "/.git/config"] [unique_id "au_0RqnfdIEogGKVg_zaaAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:21:58
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:21:51.900143 2026] [security2:error] [pid 26805:tid 26805] [client 172.68.159.167:10199] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:21:51.900143 2026] [security2:error] [pid 26805:tid 26805] [client 172.68.159.167:10199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thunder-kings.hodlmoser.com"] [uri "/.git/HEAD"] [unique_id "au_qz_CSaY0vaA30TfryJQAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:18:52
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:18:45.622955 2026] [security2:error] [pid 2794:tid 2794] [client 172.68.159.167:12600] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:18:45.622955 2026] [security2:error] [pid 2794:tid 2794] [client 172.68.159.167:12600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alfredintelligence.com"] [uri "/.git/config"] [unique_id "au_cBdfnEIP35WU47qQfIgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:43:36
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:43:29.541202 2026] [security2:error] [pid 18878:tid 18878] [client 172.68.159.167:10650] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:43:29.541202 2026] [security2:error] [pid 18878:tid 18878] [client 172.68.159.167:10650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenalfordemocracy.com"] [uri "/.git/HEAD"] [unique_id "au_TwWyCBlBPwlN50iLcvAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:15:14
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:15:09.990463 2026] [security2:error] [pid 18478:tid 18478] [client 172.68.159.167:12587] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:15:09.990463 2026] [security2:error] [pid 18478:tid 18478] [client 172.68.159.167:12587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raystransmission.com"] [uri "/.git/config"] [unique_id "au_NHfp7SOF97L_EoJhU1AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:48:40
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:48:34.774098 2026] [security2:error] [pid 26738:tid 26738] [client 172.68.159.167:13530] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:48:34.774098 2026] [security2:error] [pid 26738:tid 26738] [client 172.68.159.167:13530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winbayfire.com"] [uri "/.git/config"] [unique_id "au_G4vVV3vmSc5jaze7cWwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-07 23:36:27
UTC ·
(12 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇩🇪
todix
2026-11-07 23:31:44
UTC ·
(12 hours ago)
"GET /.git/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 23:07:31
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:07:27.118387 2026] [security2:error] [pid 23582:tid 23582] [client 172.68.159.167:13410] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:07:27.118387 2026] [security2:error] [pid 23582:tid 23582] [client 172.68.159.167:13410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clubmarshall.com"] [uri "/.git/config"] [unique_id "au-vL5t67j38C3ZK65CpmQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:38:40
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:38:33.529006 2026] [security2:error] [pid 19955:tid 19955] [client 172.68.159.167:14253] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:38:33.529006 2026] [security2:error] [pid 19955:tid 19955] [client 172.68.159.167:14253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baumannarchitecture.com"] [uri "/.git/config"] [unique_id "au-oaQpJwgs_gz7rKyG-zwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:14:05
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:13:59.816171 2026] [security2:error] [pid 18332:tid 18332] [client 172.68.159.167:11090] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:13:59.816171 2026] [security2:error] [pid 18332:tid 18332] [client 172.68.159.167:11090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edscontracting.com"] [uri "/.git/config"] [unique_id "au-ip4BYVWvJmgmaMH4HugAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
