🇩🇪
altenglaner
2026-11-14 04:26:45
UTC ·
(5 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 04:00:00
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:59:56.645785 2026] [security2:error] [pid 8289:tid 8350] [client 162.158.102.113:9767] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:59:56.645785 2026] [security2:error] [pid 8289:tid 8350] [client 162.158.102.113:9767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedfinancialmanager.aafm.us"] [uri "/.git/config"] [unique_id "avfcvIsnB8n_mAVPH-M-8wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:18:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:18:40.057039 2026] [security2:error] [pid 13174:tid 13174] [client 162.158.102.113:1100 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:18:40.057039 2026] [security2:error] [pid 13174:tid 13174] [client 162.158.102.113:11009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "numbularycom.numbulary.org"] [uri "/.git/HEAD"] [unique_id "avbkAAomtoxRn-skORPsMgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-12 13:53:12
UTC ·
(1 day ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇨🇭
4server
2026-11-12 13:50:05
UTC ·
(1 day ago)
[ThuNov1214:49:58.1592072026][security2:error][pid3477196:tid3477307][client162.158.102.113:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960 ...
show more
[ThuNov1214:49:58.1592072026][security2:error][pid3477196:tid3477307][client162.158.102.113:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpanel.behindthemoon.ch\"][uri\"/.git/HEAD\"][unique_id\"avXEBmM8eovJwNKgy7mBmAAAAJg\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 12:28:21
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:28:17.889567 2026] [security2:error] [pid 684:tid 684] [client 162.158.102.113:9605] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:28:17.889567 2026] [security2:error] [pid 684:tid 684] [client 162.158.102.113:9605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mta-sts.wholesalelivelobsters.com"] [uri "/.git/HEAD"] [unique_id "avWw4XoNMoBS7UghO-OOLgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-12 11:27:26
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-12T11:26:34.000Z.
Web App Attack
2026-11-12 04:34:03
UTC ·
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-11-12 04:31:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:31:43.533083 2026] [security2:error] [pid 17764:tid 17764] [client 162.158.102.113:1269 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:31:43.533083 2026] [security2:error] [pid 17764:tid 17764] [client 162.158.102.113:12693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.boblog111.com"] [uri "/.git/HEAD"] [unique_id "avVBL80xGo5LHjoqbP3tuQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 04:02:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:02:39.329551 2026] [security2:error] [pid 11671:tid 11671] [client 162.158.102.113:1207 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:02:39.329551 2026] [security2:error] [pid 11671:tid 11671] [client 162.158.102.113:12074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.trixieotoole.com"] [uri "/.git/config"] [unique_id "avU6Xz5_5AReY9-shoYgxwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 03:38:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:38:00.148874 2026] [security2:error] [pid 18055:tid 18055] [client 162.158.102.113:1412 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:38:00.148874 2026] [security2:error] [pid 18055:tid 18055] [client 162.158.102.113:14128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.americanexportimport.com"] [uri "/.git/HEAD"] [unique_id "avU0mIys4nOzM5ADki3VTQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
uthul
2026-11-12 02:48:04
UTC ·
(2 days ago)
T-Pot honeypot: 9 hits on ports [443] (automated)
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 23:06:44
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:06:40.489325 2026] [security2:error] [pid 3809:tid 3809] [client 162.158.102.113:13898] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:06:40.489325 2026] [security2:error] [pid 3809:tid 3809] [client 162.158.102.113:13898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andrejblatnik.com"] [uri "/.git/config"] [unique_id "avT1ANfFP2Md1dQ0HFLF1gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:04:18
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:04:12.107155 2026] [security2:error] [pid 31401:tid 31401] [client 162.158.102.113:1325 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:04:12.107155 2026] [security2:error] [pid 31401:tid 31401] [client 162.158.102.113:13254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lahamradio.com"] [uri "/.git/HEAD"] [unique_id "avTKPH9YbstYkgxhx-IcpwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 17:50:44
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:50:41.079087 2026] [security2:error] [pid 20859:tid 20859] [client 162.158.102.113:1097 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:50:41.079087 2026] [security2:error] [pid 20859:tid 20859] [client 162.158.102.113:10977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dogandponyband.com"] [uri "/.git/config"] [unique_id "avSq8af-HDqkmGWQSavHegAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
