2026-11-04 00:10:37
UTC ·
(6 days ago)
abuse access
Hacking
Brute-Force
Web App Attack
🇸🇰
KSBA
2026-11-03 13:18:03
UTC ·
(6 days ago)
Automatic report from KSBA firewall log.
Port Scan
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-11-03 13:16:26
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 68.183.132.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:16:19.627347 2026] [security2:error] [pid 28510:tid 28510] [client 68.183.132.73:43170] M ...
show more
(mod_security) mod_security (id:210492) triggered by 68.183.132.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:16:19.627347 2026] [security2:error] [pid 28510:tid 28510] [client 68.183.132.73:43170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.28"] [uri "/.git/config"] [unique_id "auneo7nUSZsOhHvItgvs4QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-03 13:15:05
UTC ·
(6 days ago)
(web_sensitive_file) srv103 Sensitive file probe (.env/.git/backup) 68.183.132.73 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇳🇱
Alt255
2026-11-03 13:11:32
UTC ·
(6 days ago)
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 68.183.132.73 - - \[03/Nov/2026:14:11:10 +0100\] "GET /.git/config HTTP/1.1" 200 8206 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML ...
show more
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 68.183.132.73 - - \[03/Nov/2026:14:11:10 +0100\] "GET /.git/config HTTP/1.1" 200 8206 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
creechy
2026-11-03 13:08:07
UTC ·
(6 days ago)
68.183.132.73 - - [03/Nov/2026:05:08:05 -0800] "GET /.git/config HTTP/1.1" 403 689 107.137.67.44 107.137.67.44
...
Hacking
Bad Web Bot
🇳🇴
tmiland
2026-11-03 12:58:09
UTC ·
(6 days ago)
(nginx_404) Dot directory Honeypot Trap 68.183.132.73 (US/United States/-): 2 in the last 3600 secs; IP: 68.183.132.73; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 68.183.132.73 - - [03/Nov/2026:13:58:04 +0100] "GET /.git/config HTTP ...
show more
(nginx_404) Dot directory Honeypot Trap 68.183.132.73 (US/United States/-): 2 in the last 3600 secs; IP: 68.183.132.73; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 68.183.132.73 - - [03/Nov/2026:13:58:04 +0100] "GET /.git/config HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 68.183.132.73 - - [03/Nov/2026:13:58:07 +0100] "GET /.git/config HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
show less
Brute-Force
🇬🇧
essinghigh
2026-11-03 12:55:23
UTC ·
(6 days ago)
IPS Detection: 68.183.132.73 -> DPT: 80
Port Scan
🇺🇸
TPI-Abuse
2026-11-03 12:54:11
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 68.183.132.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:54:07.642668 2026] [security2:error] [pid 6846:tid 6846] [client 68.183.132.73:35742] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 68.183.132.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:54:07.642668 2026] [security2:error] [pid 6846:tid 6846] [client 68.183.132.73:35742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.248"] [uri "/.git/config"] [unique_id "aunZb99ytO5ED9CgO2NEEwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
JustMeHere
2026-11-03 12:44:23
UTC ·
(6 days ago)
[Tue Nov 03 07:44:18.671770 2026] [security2:error] [pid 52711:tid 52843] [client 68.183.132.73:39792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/act ...
show more
[Tue Nov 03 07:44:18.671770 2026] [security2:error] [pid 52711:tid 52843] [client 68.183.132.73:39792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/.git/config"] [unique_id "aunXIuC1iiAoLMFCoes56QAAAE8"]
...
show less
Web App Attack
🇹🇷
Domainhizmetleri.com
2026-11-03 12:38:52
UTC ·
(6 days ago)
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (80/tcp)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 12:34:53
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 68.183.132.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:34:46.539726 2026] [security2:error] [pid 3307939:tid 3307953] [client 68.183.132.73:3563 ...
show more
(mod_security) mod_security (id:210492) triggered by 68.183.132.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:34:46.539726 2026] [security2:error] [pid 3307939:tid 3307953] [client 68.183.132.73:35634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.128"] [uri "/.git/config"] [unique_id "aunU5tWKcP9lbKI7dN7duwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
swrlly
2026-11-03 12:24:45
UTC ·
(6 days ago)
1 unauthorized webserver connection
Web App Attack
🇬🇧
Smish
2026-11-03 12:24:19
UTC ·
(6 days ago)
HONEYPOT HIT --> Fail2ban time=1793708658 log=2026-11-03T12:24:18+00:00 ip=68.183.132.73 host=89.39.211.6 method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/ ...
show more
HONEYPOT HIT --> Fail2ban time=1793708658 log=2026-11-03T12:24:18+00:00 ip=68.183.132.73 host=89.39.211.6 method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ref="-" rid=1053d5927b5c43f948e344eb5f2b4b82
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 12:15:40
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 68.183.132.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:15:34.726239 2026] [security2:error] [pid 12154:tid 12154] [client 68.183.132.73:58340] M ...
show more
(mod_security) mod_security (id:210492) triggered by 68.183.132.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:15:34.726239 2026] [security2:error] [pid 12154:tid 12154] [client 68.183.132.73:58340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.60"] [uri "/.git/config"] [unique_id "aunQZk80W5hzvHyT4Pfk5QAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
