🇩🇪
FeG Deutschland
2026-11-12 17:37:46
UTC ·
(23 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 01:02:39
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:02:36.256291 2026] [security2:error] [pid 10080:tid 10080] [client 172.68.159.192:9476] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:02:36.256291 2026] [security2:error] [pid 10080:tid 10080] [client 172.68.159.192:9476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.weyoungrenovations.com"] [uri "/.git/config"] [unique_id "avUQLMS05kz5sCPijzldpAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 23:05:35
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:05:30.863291 2026] [security2:error] [pid 27036:tid 27036] [client 172.68.159.192:11149] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:05:30.863291 2026] [security2:error] [pid 27036:tid 27036] [client 172.68.159.192:11149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thumbliving.jasbemarketing.com"] [uri "/.git/HEAD"] [unique_id "avT0utYAceru5ghpmiHldQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:46:51
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:46:47.345890 2026] [security2:error] [pid 18598:tid 18598] [client 172.68.159.192:10769] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:46:47.345890 2026] [security2:error] [pid 18598:tid 18598] [client 172.68.159.192:10769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jjhfamily.com"] [uri "/.git/config"] [unique_id "avTwVxDL8mhgzJxIuCPZNAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:59:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:59:52.052639 2026] [security2:error] [pid 17175:tid 17175] [client 172.68.159.192:13619] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:59:52.052639 2026] [security2:error] [pid 17175:tid 17175] [client 172.68.159.192:13619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.michaelsabbey.com"] [uri "/.git/HEAD"] [unique_id "avTXSKUe6yozwvsKXDomaQAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
cleverest.eu
2026-11-10 05:17:17
UTC ·
(3 days ago)
MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / vcs_probe"}
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:53:47
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:53:43.858142 2026] [security2:error] [pid 25808:tid 25808] [client 172.68.159.192:10477] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:53:43.858142 2026] [security2:error] [pid 25808:tid 25808] [client 172.68.159.192:10477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.meliaethelwoodard.com"] [uri "/.git/HEAD"] [unique_id "avKjVydCT5Zv1OuEHv_2eQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:23:29
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:23:25.495168 2026] [security2:error] [pid 11470:tid 11470] [client 172.68.159.192:12548] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:23:25.495168 2026] [security2:error] [pid 11470:tid 11470] [client 172.68.159.192:12548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jewelrybuyers.net"] [uri "/.git/HEAD"] [unique_id "avKOLckDD9p8FWDVG1w-0gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:24:34
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:24:27.698984 2026] [security2:error] [pid 25947:tid 25947] [client 172.68.159.192:13006] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:24:27.698984 2026] [security2:error] [pid 25947:tid 25947] [client 172.68.159.192:13006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intelerium.com"] [uri "/.git/config"] [unique_id "avKAW0HgndWiQfUxNGpugQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-09 18:24:04
UTC ·
(3 days ago)
[cb-01vi] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.192 - - [09/Nov/2026:19:23:48 +0100] "GET /.git/config HTTP/2.0" 403 1975 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) ...
show more
[cb-01vi] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.192 - - [09/Nov/2026:19:23:48 +0100] "GET /.git/config HTTP/2.0" 403 1975 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:21:19
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:21:11.421868 2026] [security2:error] [pid 9175:tid 9175] [client 172.68.159.192:11257] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:21:11.421868 2026] [security2:error] [pid 9175:tid 9175] [client 172.68.159.192:11257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ic1surplus.com"] [uri "/.git/config"] [unique_id "avHW15kxEHhVWT44tUvBsgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:10:18
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:10:14.954863 2026] [security2:error] [pid 30587:tid 30587] [client 172.68.159.192:11428] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:10:14.954863 2026] [security2:error] [pid 30587:tid 30587] [client 172.68.159.192:11428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.konstantiasofokleous.com"] [uri "/.git/HEAD"] [unique_id "avHGNlYoxnVXiVx1RRcoIAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-09 12:52:08
UTC ·
(4 days ago)
"GET /.git/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:45:57
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:45:51.591659 2026] [security2:error] [pid 9121:tid 9121] [client 172.68.159.192:13725] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:45:51.591659 2026] [security2:error] [pid 9121:tid 9121] [client 172.68.159.192:13725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.growingsolutions.org"] [uri "/.git/HEAD"] [unique_id "avGkXyiMkZN8NKNY5rbpOQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-09 10:31:57
UTC ·
(4 days ago)
"GET /.git/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
