🇺🇸
TPI-Abuse
2026-11-14 02:52:21
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:52:14.727793 2026] [security2:error] [pid 5439:tid 5439] [client 162.158.102.164:13410] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:52:14.727793 2026] [security2:error] [pid 5439:tid 5439] [client 162.158.102.164:13410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thestardance.stardancertantra.com"] [uri "/.git/HEAD"] [unique_id "avfM3lblj0DOPyj5bBgwaQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-14 00:22:22
UTC ·
(14 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-13T20:34:29.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-11-13 19:25:23
UTC ·
(18 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-13T19:23:46.000Z.
Web App Attack
🇩🇪
FeG Deutschland
2026-11-13 14:35:05
UTC ·
(23 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:47:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:47:34.438525 2026] [security2:error] [pid 1121:tid 1121] [client 162.158.102.164:11669] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:47:34.438525 2026] [security2:error] [pid 1121:tid 1121] [client 162.158.102.164:11669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.davidtempleofdeliverance.org"] [uri "/.git/HEAD"] [unique_id "avbqxrOyjReBEeGYXWT8IwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:15:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:15:36.352169 2026] [security2:error] [pid 8552:tid 8552] [client 162.158.102.164:10436] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:15:36.352169 2026] [security2:error] [pid 8552:tid 8552] [client 162.158.102.164:10436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.deltad.net"] [uri "/.git/HEAD"] [unique_id "avbVOHVBpCnFKj_yFR_nzQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 07:07:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:07:12.209599 2026] [security2:error] [pid 8263:tid 8277] [client 162.158.102.164:10517] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:07:12.209599 2026] [security2:error] [pid 8263:tid 8277] [client 162.158.102.164:10517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gotlib.net"] [uri "/.git/config"] [unique_id "ava3ILOGPwBCFb09oZY5YgAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:27:07
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:27:03.998598 2026] [security2:error] [pid 29728:tid 29728] [client 162.158.102.164:1273 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:27:03.998598 2026] [security2:error] [pid 29728:tid 29728] [client 162.158.102.164:12731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.endriss.info"] [uri "/.git/config"] [unique_id "avYTBwgR0fT75Fpii5uw1wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-12 14:27:38
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
Anonymous
2026-11-12 04:35:11
UTC ·
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-11-11 10:52:48
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:52:44.298141 2026] [security2:error] [pid 6160:tid 6160] [client 162.158.102.164:14047] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:52:44.298141 2026] [security2:error] [pid 6160:tid 6160] [client 162.158.102.164:14047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mpservice.com.sv"] [uri "/.git/config"] [unique_id "avRI_AcDps_DnFgtEB72VwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 09:25:51
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:25:44.105106 2026] [security2:error] [pid 15663:tid 15663] [client 162.158.102.164:1394 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:25:44.105106 2026] [security2:error] [pid 15663:tid 15663] [client 162.158.102.164:13946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salesfunnelworkflow.wholesalelivelobsters.com"] [uri "/.git/HEAD"] [unique_id "avLjGO4OMCh1YsofgJnA_wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:18:14
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:18:10.023784 2026] [security2:error] [pid 9200:tid 9200] [client 162.158.102.164:14262] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:18:10.023784 2026] [security2:error] [pid 9200:tid 9200] [client 162.158.102.164:14262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intra.es"] [uri "/.git/config"] [unique_id "avG6Au5Sx02UmEyzWftmtwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:32:20
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:32:17.115384 2026] [security2:error] [pid 29703:tid 29703] [client 162.158.102.164:1120 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:32:17.115384 2026] [security2:error] [pid 29703:tid 29703] [client 162.158.102.164:11203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ipostsocialmedia.com"] [uri "/.git/HEAD"] [unique_id "avGhMZmzYgaJ_tfwZXd_dgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:47:00
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:46:53.967006 2026] [security2:error] [pid 21727:tid 21727] [client 162.158.102.164:9688 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:46:53.967006 2026] [security2:error] [pid 21727:tid 21727] [client 162.158.102.164:9688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.renju.net"] [uri "/.git/config"] [unique_id "avGWjR5FkbpRWhT5rmzWhgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack