🇧🇪
madeit
2026-11-14 19:54:55
UTC ·
(14 minutes ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 14:50:29
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:50:23.755627 2026] [security2:error] [pid 1262143:tid 1262143] [client 162.158.102.13:94 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:50:23.755627 2026] [security2:error] [pid 1262143:tid 1262143] [client 162.158.102.13:9465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pc-rack.com"] [uri "/.git/HEAD"] [unique_id "avh1L43rZQvIPS4D5eu3bQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-14 07:49:43
UTC ·
(12 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 06:00:41
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:00:37.571691 2026] [security2:error] [pid 13310:tid 13310] [client 162.158.102.13:10010] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:00:37.571691 2026] [security2:error] [pid 13310:tid 13310] [client 162.158.102.13:10010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertocameron.com"] [uri "/.git/HEAD"] [unique_id "avf5BS4rD_GzImpqCHs6BwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 04:01:16
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:01:07.773311 2026] [security2:error] [pid 4974:tid 4979] [client 162.158.102.13:9884] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:01:07.773311 2026] [security2:error] [pid 4974:tid 4979] [client 162.158.102.13:9884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafmgcc.com.aafm.us"] [uri "/.git/config"] [unique_id "avfdAwVs9iDXPDp38f2MUQAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 16:46:02
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:45:55.902577 2026] [security2:error] [pid 13015:tid 13015] [client 162.158.102.13:12242] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:45:55.902577 2026] [security2:error] [pid 13015:tid 13015] [client 162.158.102.13:12242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.armorcorp.gulftelecom.com"] [uri "/.git/HEAD"] [unique_id "avXtQ042_aEp5P7L476-9AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-12 08:36:24
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-12T08:34:00.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 07:08:39
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:08:33.365110 2026] [security2:error] [pid 27662:tid 27662] [client 162.158.102.13:13009] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:08:33.365110 2026] [security2:error] [pid 27662:tid 27662] [client 162.158.102.13:13009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mariakhalitov.com"] [uri "/.git/HEAD"] [unique_id "avVl8cJbMrUhX2U6ISdGzQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:48:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:48:28.355632 2026] [security2:error] [pid 24938:tid 24938] [client 162.158.102.13:13825] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:48:28.355632 2026] [security2:error] [pid 24938:tid 24938] [client 162.158.102.13:13825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.restlesseye.com"] [uri "/.git/config"] [unique_id "avVhPM3ZRi18qnkA-td_9QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:25:20
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:25:15.427376 2026] [security2:error] [pid 8332:tid 8332] [client 162.158.102.13:11520] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:25:15.427376 2026] [security2:error] [pid 8332:tid 8332] [client 162.158.102.13:11520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.vittariabeauty.com"] [uri "/.git/config"] [unique_id "avVby5zOIOu_KeiSJ22l1wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-12 04:35:28
UTC ·
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇸🇬
securejdprop
2026-11-11 22:13:13
UTC ·
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.
Hacking
🇺🇸
TPI-Abuse
2026-11-11 20:29:59
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:29:55.892639 2026] [security2:error] [pid 23526:tid 23526] [client 162.158.102.13:10430] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:29:55.892639 2026] [security2:error] [pid 23526:tid 23526] [client 162.158.102.13:10430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lobstercrmbeta.modernsalessolutions.com"] [uri "/.git/HEAD"] [unique_id "avTQQxblmYixJp5vaQFutAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-11-10 17:32:17
UTC ·
(4 days ago)
tcp/443 (8 or more attempts)
Port Scan
🇺🇸
TPI-Abuse
2026-11-10 07:34:27
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:34:21.327814 2026] [security2:error] [pid 17420:tid 17420] [client 162.158.102.13:11053] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:34:21.327814 2026] [security2:error] [pid 17420:tid 17420] [client 162.158.102.13:11053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srm.altermondo.com"] [uri "/.git/HEAD"] [unique_id "avLI_Z-FadCprmHFVjxlHAAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
