🇺🇸
TPI-Abuse
2026-11-11 22:03:43
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:03:36.438001 2026] [security2:error] [pid 26617:tid 26617] [client 162.158.102.109:1368 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:03:36.438001 2026] [security2:error] [pid 26617:tid 26617] [client 162.158.102.109:13682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sparler.com"] [uri "/.git/HEAD"] [unique_id "avTmOIA14PvuCptP7xp9-QAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:46:56
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:46:52.777760 2026] [security2:error] [pid 1978:tid 1978] [client 162.158.102.109:13831] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:46:52.777760 2026] [security2:error] [pid 1978:tid 1978] [client 162.158.102.109:13831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ic1.biz"] [uri "/.git/config"] [unique_id "avRxzD--WRcYEeXlZWjEMAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
webemsegundos
2026-11-11 06:44:29
UTC ·
(20 hours ago)
Web vulnerability scanner: 1 probe paths (e.g. /.git/HEAD). Blocked by WeS Firewall.
Bad Web Bot
Web App Attack
🇳🇱
myip.foo
2026-11-10 14:37:15
UTC ·
(1 day ago)
[myip.foo] 162.158.102.109 - - [10/Nov/2026:14:37:14 +0000] "GET /.git/HEAD HTTP/1.1" 404 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
Web App Attack
🇫🇷
Little Iguana
2026-11-10 14:14:18
UTC ·
(1 day ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇺🇸
TPI-Abuse
2026-11-10 12:17:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:17:11.342400 2026] [security2:error] [pid 5177:tid 5220] [client 162.158.102.109:12807] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:17:11.342400 2026] [security2:error] [pid 5177:tid 5220] [client 162.158.102.109:12807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isa-energy.net.oplconnect.com"] [uri "/.git/HEAD"] [unique_id "avMLR9UQXRMBUQW0VTNNQAAAAkI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:55:54
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:55:47.513267 2026] [security2:error] [pid 12538:tid 12538] [client 162.158.102.109:1064 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:55:47.513267 2026] [security2:error] [pid 12538:tid 12538] [client 162.158.102.109:10646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "llew.life.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.git/HEAD"] [unique_id "avLcE2HMY1SZ5TgpygIxIAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:11:03
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:10:58.204699 2026] [security2:error] [pid 32644:tid 32644] [client 162.158.102.109:9716 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:10:58.204699 2026] [security2:error] [pid 32644:tid 32644] [client 162.158.102.109:9716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rookscpa.com"] [uri "/.git/config"] [unique_id "avKLQnAnlaOjOOl68RqwCgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:38:59
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:38:54.655487 2026] [security2:error] [pid 26022:tid 26022] [client 162.158.102.109:1094 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:38:54.655487 2026] [security2:error] [pid 26022:tid 26022] [client 162.158.102.109:10949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reciprodyne.com"] [uri "/.git/HEAD"] [unique_id "avJ1rsUZfCQQ_XKJ9MsI1wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TtlPst
2026-11-09 18:02:48
UTC ·
(2 days ago)
App probing / vulnerability scanning in path /.git/HEAD
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-09 12:36:38
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:36:33.193727 2026] [security2:error] [pid 3925:tid 3997] [client 162.158.102.109:10909] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:36:33.193727 2026] [security2:error] [pid 3925:tid 3997] [client 162.158.102.109:10909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.6.beckmon.com"] [uri "/.git/HEAD"] [unique_id "avG-Uc1ZbZ67TPGJUDGK9wAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:18:50
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:18:43.299602 2026] [security2:error] [pid 30272:tid 30272] [client 162.158.102.109:1393 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:18:43.299602 2026] [security2:error] [pid 30272:tid 30272] [client 162.158.102.109:13938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.modernsalesforce.com"] [uri "/.git/HEAD"] [unique_id "avG6I_QXGP2hdxCme_yISwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:40:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:40:40.703448 2026] [security2:error] [pid 9628:tid 9628] [client 162.158.102.109:12422] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:40:40.703448 2026] [security2:error] [pid 9628:tid 9628] [client 162.158.102.109:12422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lifestyleabs.starrmail.net"] [uri "/.git/config"] [unique_id "avGHCLwLsLhDH3iKQOOcDwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:27:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:27:00.104010 2026] [security2:error] [pid 4113:tid 4113] [client 162.158.102.109:12304] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:27:00.104010 2026] [security2:error] [pid 4113:tid 4113] [client 162.158.102.109:12304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.stlrosesociety.org"] [uri "/.git/config"] [unique_id "avF1xEpmyALSOnPnFGcdLgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:26:14
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:26:10.245380 2026] [security2:error] [pid 26479:tid 26479] [client 162.158.102.109:1400 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:26:10.245380 2026] [security2:error] [pid 26479:tid 26479] [client 162.158.102.109:14002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.flatchestedmama.com"] [uri "/.git/config"] [unique_id "avFngnOllrxEgIs1JQfOPQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
