🇧🇪
madeit
2026-11-14 18:28:30
UTC ·
(55 minutes ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 16:28:06
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:28:00.381199 2026] [security2:error] [pid 3959:tid 3959] [client 172.68.159.37:12049] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:28:00.381199 2026] [security2:error] [pid 3959:tid 3959] [client 172.68.159.37:12049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "huntingforebears.com"] [uri "/.git/config"] [unique_id "aviMEM7tz5tt9jawr-LjEwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 06:05:43
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:05:36.755666 2026] [security2:error] [pid 30065:tid 30065] [client 172.68.159.37:9270] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:05:36.755666 2026] [security2:error] [pid 30065:tid 30065] [client 172.68.159.37:9270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaylamaclaincounseling.com"] [uri "/.git/HEAD"] [unique_id "avf6MGEBYEUzGWcDgvldfwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-13 22:51:51
UTC ·
(20 hours ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:55:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:54:54.156676 2026] [security2:error] [pid 683736:tid 683736] [client 172.68.159.37:13849] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:54:54.156676 2026] [security2:error] [pid 683736:tid 683736] [client 172.68.159.37:13849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.elegantweddinginvitations.net"] [uri "/.git/config"] [unique_id "avbebkTpXp1Zc-MnCH-UewAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-12 21:47:32
UTC ·
(1 day ago)
Accessed trap at '/.git/config'
Web App Attack
🇨🇦
webemsegundos
2026-11-12 13:16:09
UTC ·
(2 days ago)
Web vulnerability scanner: 1 probe paths (e.g. /.git/config). Blocked by WeS Firewall.
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-12 12:22:57
UTC ·
(2 days ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:46:48
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:46:42.380748 2026] [security2:error] [pid 18455:tid 18455] [client 172.68.159.37:12992] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:46:42.380748 2026] [security2:error] [pid 18455:tid 18455] [client 172.68.159.37:12992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secemexico.com.disenowebprofesional.com"] [uri "/.git/config"] [unique_id "avVg0vhTr14ZteEILswV7wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 05:00:16
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:00:11.437305 2026] [security2:error] [pid 1065:tid 1065] [client 172.68.159.37:13636] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:00:11.437305 2026] [security2:error] [pid 1065:tid 1065] [client 172.68.159.37:13636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazingmachining.amazinghydraulics.com"] [uri "/.git/config"] [unique_id "avVH22gafd8CyQZ-3jqZ0wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:45:22
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:45:17.955037 2026] [security2:error] [pid 16444:tid 16444] [client 172.68.159.37:12795] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:45:17.955037 2026] [security2:error] [pid 16444:tid 16444] [client 172.68.159.37:12795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yalaz.com"] [uri "/.git/config"] [unique_id "avTv_bN2k_Xp1WlzxBJSEgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:11:28
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:11:21.863403 2026] [security2:error] [pid 4760:tid 4760] [client 172.68.159.37:10876] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:11:21.863403 2026] [security2:error] [pid 4760:tid 4760] [client 172.68.159.37:10876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backyardbrickoven.com"] [uri "/.git/config"] [unique_id "avTZ-cmNDJzstZkrgWr0-QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-11-11 06:08:02
UTC ·
(3 days ago)
-:443 172.68.159.37 - - [11/Nov/2026:07:08:00 +0100] - "GET /.git/config HTTP/2.0" 404 54862 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
🇩🇪
ghostwarriors
2026-11-10 14:50:06
UTC ·
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-11-10 14:26:07
UTC ·
(4 days ago)
172.68.159.37 - - [10/Nov/2026:15:26:04 +0100] "GET /wp-config.php.bak HTTP/1.1" 301 597 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
172.68.159.37 - - [10/Nov/202 ...
show more
172.68.159.37 - - [10/Nov/2026:15:26:04 +0100] "GET /wp-config.php.bak HTTP/1.1" 301 597 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
172.68.159.37 - - [10/Nov/2026:15:26:04 +0100] "GET /config.php HTTP/1.1" 301 582 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1"
172.68.159.37 - - [10/Nov/2026:15:26:04 +0100] "GET /appsettings.json HTTP/1.1" 301 594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0"
172.68.159.37 - - [09/Nov/2026:21:56:32 +0100] "GET /.git/config HTTP/2.0" 403 367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Web App Attack
Brute-Force