🇺🇸
TPI-Abuse
2026-11-10 09:32:27
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:32:23.400035 2026] [security2:error] [pid 21860:tid 21860] [client 162.158.102.129:1052 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:32:23.400035 2026] [security2:error] [pid 21860:tid 21860] [client 162.158.102.129:10522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.groovedoctors.com"] [uri "/.git/HEAD"] [unique_id "avLkpwQDiWM_tPeEYXcMKQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-10 04:45:51
UTC ·
(5 hours ago)
GET /.git/HEAD (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:48:26
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:48:21.459281 2026] [security2:error] [pid 27930:tid 27930] [client 162.158.102.129:1019 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:48:21.459281 2026] [security2:error] [pid 27930:tid 27930] [client 162.158.102.129:10197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adona.org"] [uri "/.git/config"] [unique_id "avKUBTKweQQPAgbHQ-TQIgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:33:17
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:33:14.341922 2026] [security2:error] [pid 31471:tid 31471] [client 162.158.102.129:1264 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:33:14.341922 2026] [security2:error] [pid 31471:tid 31471] [client 162.158.102.129:12648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title29.com"] [uri "/.git/HEAD"] [unique_id "avJ0WuUjhsdAZBkxfnWG5AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 17:16:28
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:16:22.592636 2026] [security2:error] [pid 6238:tid 6238] [client 162.158.102.129:10889] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:16:22.592636 2026] [security2:error] [pid 6238:tid 6238] [client 162.158.102.129:10889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgelaceysales.com"] [uri "/.git/config"] [unique_id "avH_5jlsp10Hz2gmzzni_AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-09 17:00:23
UTC ·
(17 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:56:06
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:55:58.100777 2026] [security2:error] [pid 1533340:tid 1533429] [client 162.158.102.129: ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:55:58.100777 2026] [security2:error] [pid 1533340:tid 1533429] [client 162.158.102.129:11567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.killerrockandroll.com"] [uri "/.git/config"] [unique_id "avH7Hg1HsJrje_ZeqNnChwAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:01:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:01:38.694757 2026] [security2:error] [pid 8844:tid 8844] [client 162.158.102.129:11608] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:01:38.694757 2026] [security2:error] [pid 8844:tid 8844] [client 162.158.102.129:11608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.homecheckinmaine.com"] [uri "/.git/HEAD"] [unique_id "avFv0qvF7dS5PzAZtL-3vQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:04:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:04:27.768782 2026] [security2:error] [pid 1187:tid 1187] [client 162.158.102.129:9450] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:04:27.768782 2026] [security2:error] [pid 1187:tid 1187] [client 162.158.102.129:9450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.brandfacets.com"] [uri "/.git/HEAD"] [unique_id "avFia6YGrR8lb4X5p4QKowAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-11-09 05:15:00
UTC ·
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:31:17
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:31:11.199504 2026] [security2:error] [pid 13896:tid 13896] [client 162.158.102.129:1224 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:31:11.199504 2026] [security2:error] [pid 13896:tid 13896] [client 162.158.102.129:12242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertalfas.org"] [uri "/.git/config"] [unique_id "avEiXysFWFoRGUx1EjtO8gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-09 00:55:10
UTC ·
(1 day ago)
[09/Nov/2026:02:55:09 +0200] -- 162.158.102.129 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:29:12
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:29:07.913878 2026] [security2:error] [pid 9888:tid 9888] [client 162.158.102.129:11961] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:29:07.913878 2026] [security2:error] [pid 9888:tid 9888] [client 162.158.102.129:11961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.stonesandbones.net"] [uri "/.git/config"] [unique_id "avET08lWyNRn1F2EWMUUhQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:10:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:10:06.741027 2026] [security2:error] [pid 18130:tid 18130] [client 162.158.102.129:1202 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:10:06.741027 2026] [security2:error] [pid 18130:tid 18130] [client 162.158.102.129:12027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis7.co"] [uri "/.git/HEAD"] [unique_id "avEPXr5UgMHP8hJwu39UnQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:57:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:57:24.124852 2026] [security2:error] [pid 15386:tid 15386] [client 162.158.102.129:1211 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:57:24.124852 2026] [security2:error] [pid 15386:tid 15386] [client 162.158.102.129:12113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astrowatt.powerastronomy.com"] [uri "/.git/HEAD"] [unique_id "avCp9H80DCpgQenDa3j5wAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack