🇺🇸
LotPhantom
2026-07-02 09:43:53
(2 hours ago)
45.43.166.159 - - [02/Jul/2026:09:43:41 +0000] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT ...
show more
45.43.166.159 - - [02/Jul/2026:09:43:41 +0000] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" "0"
...
show less
Web App Attack
2026-07-02 07:13:03
(5 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, GET /.git/HEAD HTTP/1.1
Hacking
Web App Attack
🇩🇪
ghostwarriors
2026-07-02 06:50:04
(5 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 06:40:58
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:40:52.735859 2026] [security2:error] [pid 5566:tid 5566] [client 45.43.166.159:58562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lemobba.com"] [uri "/.git/HEAD"] [unique_id "akYH9GI0WxamKGSthXNKNQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-02 05:26:04
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-07-02 05:16:01
(7 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-07-02 05:14:56
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:14:50.577975 2026] [security2:error] [pid 1716:tid 1716] [client 45.43.166.159:50532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadek.com"] [uri "/.git/HEAD"] [unique_id "akXzyvZ6w52akuVVV-muQQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-02 04:24:28
(7 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 04:12:47
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:12:43.336358 2026] [security2:error] [pid 6012:tid 6012] [client 45.43.166.159:47116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lenorasflowers.com"] [uri "/.git/config"] [unique_id "akXlO3R_8JzOR-sRURmtjQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 02:01:52
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 22:01:49.063156 2026] [security2:error] [pid 4108:tid 4108] [client 45.43.166.159:39744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yankeepeddlers.newcitypark.com"] [uri "/.git/HEAD"] [unique_id "akXGjaLqdJLP9Z4nDkgkRwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-07-02 01:48:04
(10 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
Philister11
2026-07-02 01:43:02
(10 hours ago)
CrowdSec: crowdsecurity/http-sensitive-files (GB/AS0)
Web App Attack
Hacking
🇫🇷
Dechavanne
2026-07-02 01:00:09
(11 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 00:04:55
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.166.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 20:04:50.218427 2026] [security2:error] [pid 27271:tid 27271] [client 45.43.166.159:34258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yarosh.line2.biz"] [uri "/.git/HEAD"] [unique_id "akWrIsvnPAYJTFwBV8VIwwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-07-01 22:06:04
(14 hours ago)
[ThuJul0200:05:58.9749382026][security2:error][pid1788986:tid1788990][client45.43.166.159:0]ModSecur ...
show more
[ThuJul0200:05:58.9749382026][security2:error][pid1788986:tid1788990][client45.43.166.159:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"xn--sanierung-alter-huser-m2b.ch.xn--walter-wrndli-pmb.ch\"][uri\"/.git/HEAD\"][unique_id\"akWPRhBC47vbeaN56xgjWQAAAMI\"]
show less
Hacking
Web App Attack