🇩🇪
joharikop
2026-11-10 21:04:49
UTC ·
(1 hour ago)
Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-credential-probes jail.
Web App Attack
🇫🇷
mail.avx.gr
2026-11-10 19:24:50
UTC ·
(3 hours ago)
plesk-rapid-ban sensitive-file-probe host=sm.avx.gr
Hacking
🇩🇪
FeG Deutschland
2026-11-10 18:48:56
UTC ·
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:14:44
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:14:36.497674 2026] [security2:error] [pid 19322:tid 19322] [client 162.158.102.142:9535 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:14:36.497674 2026] [security2:error] [pid 19322:tid 19322] [client 162.158.102.142:9535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "playerpianorestorations.player-care.com"] [uri "/.git/HEAD"] [unique_id "avLSbPbu2u_nt756qJunuAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:38:21
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:38:17.215327 2026] [security2:error] [pid 24460:tid 24460] [client 162.158.102.142:1217 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:38:17.215327 2026] [security2:error] [pid 24460:tid 24460] [client 162.158.102.142:12175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.alanmariotti.com"] [uri "/.git/HEAD"] [unique_id "avKfuc58xwLNxD2fQETudwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:14:45
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:14:37.722793 2026] [security2:error] [pid 30302:tid 30302] [client 162.158.102.142:1331 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:14:37.722793 2026] [security2:error] [pid 30302:tid 30302] [client 162.158.102.142:13314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.haroparquet.com"] [uri "/.git/config"] [unique_id "avJv_RY2rNpyvej2DSyg6gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-09 15:27:52
UTC ·
(1 day ago)
$f2bV_matches
Brute-Force
🇺🇸
TPI-Abuse
2026-11-09 15:15:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:14:56.015027 2026] [security2:error] [pid 26217:tid 26217] [client 162.158.102.142:1262 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:14:56.015027 2026] [security2:error] [pid 26217:tid 26217] [client 162.158.102.142:12626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.timezonespro.com.verdadesreales.com"] [uri "/.git/HEAD"] [unique_id "avHjcJvupAU5ibPqhxdD-wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:44:05
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:44:01.775734 2026] [security2:error] [pid 10760:tid 10760] [client 162.158.102.142:1280 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:44:01.775734 2026] [security2:error] [pid 10760:tid 10760] [client 162.158.102.142:12809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.digitalsolutions.help"] [uri "/.git/config"] [unique_id "avHcMe-5kibfEv1o5-iStQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:29:20
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:29:17.371472 2026] [security2:error] [pid 4790:tid 4790] [client 162.158.102.142:9937] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:29:17.371472 2026] [security2:error] [pid 4790:tid 4790] [client 162.158.102.142:9937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "piperwaite.com"] [uri "/.git/config"] [unique_id "avHKrZZbGdnS5IsKhWqZ6gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:33:57
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:33:53.440072 2026] [security2:error] [pid 32428:tid 32428] [client 162.158.102.142:9634 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:33:53.440072 2026] [security2:error] [pid 32428:tid 32428] [client 162.158.102.142:9634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bridalshowerinvitationsonline.com"] [uri "/.git/config"] [unique_id "avG9sRRgPhZWUXMGD8zf0AAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:12:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:12:36.287340 2026] [security2:error] [pid 13701:tid 13701] [client 162.158.102.142:1247 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:12:36.287340 2026] [security2:error] [pid 13701:tid 13701] [client 162.158.102.142:12475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.unitedstarsaerospace.com"] [uri "/.git/HEAD"] [unique_id "avG4tCbDG_9sG7aAznTihwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:58:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:58:25.670785 2026] [security2:error] [pid 19882:tid 19882] [client 162.158.102.142:1047 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:58:25.670785 2026] [security2:error] [pid 19882:tid 19882] [client 162.158.102.142:10479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solutiongroove.com"] [uri "/.git/config"] [unique_id "avFhAbwytzypbQiFIfg9OQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:40:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:40:26.981318 2026] [security2:error] [pid 26875:tid 26875] [client 162.158.102.142:1160 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:40:26.981318 2026] [security2:error] [pid 26875:tid 26875] [client 162.158.102.142:11600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.twinls.com"] [uri "/.git/config"] [unique_id "avFcyobvKBx22XHqyDqb-QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:48:57
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:48:51.385661 2026] [security2:error] [pid 28745:tid 28745] [client 162.158.102.142:1318 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:48:51.385661 2026] [security2:error] [pid 28745:tid 28745] [client 162.158.102.142:13187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.borzoi-pedigree.info"] [uri "/.git/config"] [unique_id "avFQs1DIPs-pax5ovqmfIgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack