🇺🇸
TPI-Abuse
2026-11-08 06:57:37
UTC ·
(30 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:57:34.165796 2026] [security2:error] [pid 6514:tid 6514] [client 162.158.102.176:12286] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:57:34.165796 2026] [security2:error] [pid 6514:tid 6514] [client 162.158.102.176:12286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thecorinthians.info"] [uri "/.git/HEAD"] [unique_id "avAdXunNZw8AHfVTTemnzAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:32:17
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:32:13.432802 2026] [security2:error] [pid 27565:tid 27565] [client 162.158.102.176:1039 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:32:13.432802 2026] [security2:error] [pid 27565:tid 27565] [client 162.158.102.176:10395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hodlmoser.com"] [uri "/.git/HEAD"] [unique_id "au_7TcrJhlHU4p1Mc6ZrXwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:10:11
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:10:07.222675 2026] [security2:error] [pid 3471:tid 3477] [client 162.158.102.176:9967] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:10:07.222675 2026] [security2:error] [pid 3471:tid 3477] [client 162.158.102.176:9967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bacalodge.com"] [uri "/.git/HEAD"] [unique_id "au_2Hyk4KqGnqkGj0LBPhQAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-08 03:34:59
UTC ·
(3 hours ago)
"GET /.git/HEAD HTTP/1.1" 403 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:57:17
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:57:11.937661 2026] [security2:error] [pid 24800:tid 24800] [client 162.158.102.176:1178 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:57:11.937661 2026] [security2:error] [pid 24800:tid 24800] [client 162.158.102.176:11786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drwolberg.com"] [uri "/.git/HEAD"] [unique_id "au_lBwA8qAOotSlb6CplAwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-08 02:24:32
UTC ·
(5 hours ago)
[Sun Nov 08 13:24:31.547827 2026] [security2:error] [pid 856190] [client 162.158.102.176:10628] [client 162.158.102.176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/ ...
show more
[Sun Nov 08 13:24:31.547827 2026] [security2:error] [pid 856190] [client 162.158.102.176:10628] [client 162.158.102.176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "embodiment.mareeshefford.com"] [uri "/.git/HEAD"] [unique_id "au_dX8JdwjdgcC5v25ZrHwAAAAk"]
...
show less
Web App Attack
Anonymous
2026-11-08 02:01:53
UTC ·
(5 hours ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:10:51
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:10:46.544449 2026] [security2:error] [pid 11955:tid 11955] [client 162.158.102.176:1238 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:10:46.544449 2026] [security2:error] [pid 11955:tid 11955] [client 162.158.102.176:12380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "julecarey.com"] [uri "/.git/HEAD"] [unique_id "au_MFpYIxUklKFYKlO9nwAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-07 23:29:21
UTC ·
(7 hours ago)
"GET /.git/HEAD HTTP/1.1" 403 6529 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
Rip
2026-11-07 23:16:55
UTC ·
(8 hours ago)
Restricted File Access Attempts
Port Scan
Web App Attack
Anonymous
2026-11-07 23:16:39
UTC ·
(8 hours ago)
Web probing (1 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-25 13:18:47
UTC ·
(1 week ago)
[25/Oct/2026:15:18:46 +0200] -- 162.158.102.176 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-24 21:59:37
UTC ·
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-10-24
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-22 02:38:03
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 22:38:00.693704 2026] [security2:error] [pid 18558:tid 18558] [client 162.158.102.176:1373 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 22:38:00.693704 2026] [security2:error] [pid 18558:tid 18558] [client 162.158.102.176:13737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.giftsprinted.com"] [uri "/.git/HEAD"] [unique_id "atl3CMju8YZ5HnetQFyNmwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 21:59:46
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:59:38.688927 2026] [security2:error] [pid 7814:tid 7814] [client 162.158.102.176:13358] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:59:38.688927 2026] [security2:error] [pid 7814:tid 7814] [client 162.158.102.176:13358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.escribaniasmith.com.ar"] [uri "/.git/config"] [unique_id "atk1yiE5CQu7-Ltdhdz-_AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack