🇧🇷
borbolla
2026-08-23 13:47:37
(1 week ago)
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /signup HTTP/2.0" "HEAD /. ...
show more
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /signup HTTP/2.0" "HEAD /.env.sample HTTP/2.0"
show less
Web App Attack
Bad Web Bot
🇩🇪
Blexyel
2026-08-21 03:20:36
(1 week ago)
172.68.245.7 - - [21/Aug/2026:05:20:36 +0200] "GET //wp-admin/maint/wp-login.php HTTP/1.1" 301 162 " ...
show more
172.68.245.7 - - [21/Aug/2026:05:20:36 +0200] "GET //wp-admin/maint/wp-login.php HTTP/1.1" 301 162 "-" "-"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 04:16:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 00:16:43.490373 2026] [security2:error] [pid 7342:tid 7342] [client 172.68.245.7:10600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sloaviation.com"] [uri "/.git/HEAD"] [unique_id "aoPcqxCMNcUlxFxXkU7hPgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 00:00:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 20:00:26.473700 2026] [security2:error] [pid 29867:tid 29872] [client 172.68.245.7:12496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.latinofederation.org"] [uri "/.git/HEAD"] [unique_id "aoOgmqYUYhKIYSvu2lyIhAAAAYI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-17 21:59:45
(1 week ago)
Auto-ban: >3000 req/min op 2026-08-17
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-17 11:11:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:11:01.652344 2026] [security2:error] [pid 27760:tid 27760] [client 172.68.245.7:10109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.littlehorneng.littlehorndesign.com"] [uri "/.git/HEAD"] [unique_id "aoLsReofwoG2yIKPAv_u-AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 04:43:15
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 00:43:08.218707 2026] [security2:error] [pid 10278:tid 10278] [client 172.68.245.7:9509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.clinicacero.com"] [uri "/.git/config"] [unique_id "aoE_3JWcbNFld0juiXhg8wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-11 10:18:21
(2 weeks ago)
Web App Attack
🇦🇺
trentwiles.com
2026-05-04 20:47:04
(3 months ago)
Unauthorized connection attempt detected from IP address 172.68.245.7 to port 80 [SYD]
Port Scan
🇺🇸
TPI-Abuse
2026-03-31 03:19:05
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 23:18:58.232057 2026] [security2:error] [pid 10037:tid 10054] [client 172.68.245.7:14066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.onernet.com"] [uri "/.env.dev"] [unique_id "acs9Iq_LZe0NfHQiZ8xUZgAAAYw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:25:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:25:36.001545 2026] [security2:error] [pid 28321:tid 28321] [client 172.68.245.7:11381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sexycyborg.net"] [uri "/.env.old"] [unique_id "acqyEJLIo1PKJFC6bLtZmwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 15:23:42
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 11:23:38.487397 2026] [security2:error] [pid 29869:tid 29869] [client 172.68.245.7:11649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kerrywoodandson.com"] [uri "/.env.save"] [unique_id "acqVen4dafnmMieMaspFgAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:20:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:20:36.036793 2026] [security2:error] [pid 15283:tid 15283] [client 172.68.245.7:12597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wplusw.com"] [uri "/.env.json"] [unique_id "acp4pOHoOh7JtD1SuUESVwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 12:55:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:55:41.531120 2026] [security2:error] [pid 21479:tid 21479] [client 172.68.245.7:12344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.hawkinsenterprise.com"] [uri "/app/.env"] [unique_id "acpyzU2Bt1iS3vsNWn6ICAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:18:31
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.245.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:18:23.465165 2026] [security2:error] [pid 19681:tid 19681] [client 172.68.245.7:12768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mariekespresser.com"] [uri "/.env.local"] [unique_id "acpb_zSPYPkbyuIkB3R8TQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
