🇫🇷
Thaliruth
2026-11-10 07:48:50
UTC ·
(3 hours ago)
[10/Nov/2026:08:48:49.374487 +0100] avLMYUico9pwdlnl3AAcMQAAAJc 172.68.159.232 40690 127.0.0.1 7081
...
Hacking
🇺🇸
TPI-Abuse
2026-11-10 03:18:00
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:17:54.520028 2026] [security2:error] [pid 21880:tid 21880] [client 172.68.159.232:11872] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:17:54.520028 2026] [security2:error] [pid 21880:tid 21880] [client 172.68.159.232:11872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assheton.com"] [uri "/.git/HEAD"] [unique_id "avKM4h4LMJB3DKApzmnhhgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:31:34
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:31:25.927147 2026] [security2:error] [pid 2369049:tid 2369127] [client 172.68.159.232:13 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:31:25.927147 2026] [security2:error] [pid 2369049:tid 2369127] [client 172.68.159.232:13675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.magazineofwallstreet.com"] [uri "/.git/HEAD"] [unique_id "avJl3UQiy-a1w8DqeQX5zQAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 21:47:47
UTC ·
(13 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇩🇪
Bedios GmbH
2026-11-09 20:56:59
UTC ·
(13 hours ago)
Scanning for exposed credentials and private keys.
Hacking
🇳🇱
Alt255
2026-11-09 17:58:37
UTC ·
(16 hours ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.232 - - [09/Nov/2026:18:58:18 +0100] "GET /.git/config HTTP/2.0" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 172.68.159.232 - - [09/Nov/2026:18:58:18 +0100] "GET /.git/config HTTP/2.0" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:32:19
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:32:12.253252 2026] [security2:error] [pid 14720:tid 14720] [client 172.68.159.232:12336] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:32:12.253252 2026] [security2:error] [pid 14720:tid 14720] [client 172.68.159.232:12336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pointillistic.com"] [uri "/.git/config"] [unique_id "avHnfD2a_p7lAYb63ulcTgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:17:06
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:16:59.388912 2026] [security2:error] [pid 3435:tid 3435] [client 172.68.159.232:13323] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:16:59.388912 2026] [security2:error] [pid 3435:tid 3435] [client 172.68.159.232:13323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.californiaappraisers.net"] [uri "/.git/HEAD"] [unique_id "avHHy8sW_cmtmgUPsS4GLgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:05:26
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:05:20.683826 2026] [security2:error] [pid 27257:tid 27257] [client 172.68.159.232:13257] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:05:20.683826 2026] [security2:error] [pid 27257:tid 27257] [client 172.68.159.232:13257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.adampayments.com"] [uri "/.git/config"] [unique_id "avG3AA7lVyY9x5S6688KogAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:58:34
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:58:29.436053 2026] [security2:error] [pid 11871:tid 11871] [client 172.68.159.232:11509] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:58:29.436053 2026] [security2:error] [pid 11871:tid 11871] [client 172.68.159.232:11509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smoothiessoupssalads.com"] [uri "/.git/config"] [unique_id "avGnVS0mhhnA0s8iHMsQQAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-11-09 09:07:43
UTC ·
(1 day ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-09 09:02:35
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:02:32.724370 2026] [security2:error] [pid 13222:tid 13222] [client 172.68.159.232:11895] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:02:32.724370 2026] [security2:error] [pid 13222:tid 13222] [client 172.68.159.232:11895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.edwinrphotography.grayhost.net"] [uri "/.git/HEAD"] [unique_id "avGMKGkKcc_sG0ZK95CamQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:47:31
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:47:25.780667 2026] [security2:error] [pid 5551:tid 5551] [client 172.68.159.232:12056] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:47:25.780667 2026] [security2:error] [pid 5551:tid 5551] [client 172.68.159.232:12056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barriebrown.com.thephysicsroom.com"] [uri "/.git/config"] [unique_id "avGInaKSmUZgnLpJY9MeoAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:20:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:20:07.290544 2026] [security2:error] [pid 27933:tid 27933] [client 172.68.159.232:9836] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:20:07.290544 2026] [security2:error] [pid 27933:tid 27933] [client 172.68.159.232:9836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "urlpick.com"] [uri "/.git/HEAD"] [unique_id "avF0J-MOsZqpvFYKe-ahkwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:45:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:45:20.578431 2026] [security2:error] [pid 3945:tid 3945] [client 172.68.159.232:11887] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:45:20.578431 2026] [security2:error] [pid 3945:tid 3945] [client 172.68.159.232:11887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thedreamcatchers.eu"] [uri "/.git/HEAD"] [unique_id "avFsAMouuUugsGj0AwPl6gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
