🇭🇺
miszterx.hu
2026-11-10 07:50:52
UTC ·
(17 hours ago)
XORP (haproxy): 1x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:44:51
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:44:44.418927 2026] [security2:error] [pid 24226:tid 24226] [client 162.158.102.181:1062 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:44:44.418927 2026] [security2:error] [pid 24226:tid 24226] [client 162.158.102.181:10628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.chrischamberlain.com"] [uri "/.git/HEAD"] [unique_id "avKTLOcRkrAifXWQgrqNWQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:05:50
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:05:43.032486 2026] [security2:error] [pid 15969:tid 15969] [client 162.158.102.181:1007 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:05:43.032486 2026] [security2:error] [pid 15969:tid 15969] [client 162.158.102.181:10070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taxgroupsd.com"] [uri "/.git/config"] [unique_id "avJ796uDROq3fD3Ge5eUHwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:31:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:31:39.227458 2026] [security2:error] [pid 11404:tid 11404] [client 162.158.102.181:9250 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:31:39.227458 2026] [security2:error] [pid 11404:tid 11404] [client 162.158.102.181:9250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reneehill.net"] [uri "/.git/HEAD"] [unique_id "avJl65nv5zmBlXBQXrV-XwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mail.avx.gr
2026-11-09 22:16:40
UTC ·
(1 day ago)
plesk-rapid-ban sensitive-file-probe host=vantarispalace.paladin.gr
Hacking
🇺🇸
TPI-Abuse
2026-11-09 13:37:24
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:37:20.380414 2026] [security2:error] [pid 7618:tid 7618] [client 162.158.102.181:13571] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:37:20.380414 2026] [security2:error] [pid 7618:tid 7618] [client 162.158.102.181:13571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qed-consulting.co"] [uri "/.git/config"] [unique_id "avHMkJD3_uayDjIg1jI7RgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:10:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:10:21.885047 2026] [security2:error] [pid 22220:tid 22220] [client 162.158.102.181:1354 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:10:21.885047 2026] [security2:error] [pid 22220:tid 22220] [client 162.158.102.181:13549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bnaiisraelkearny.royal-barbershop.com"] [uri "/.git/HEAD"] [unique_id "avG4LY0wvrqcwcNPWkxJ8gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-09 11:46:17
UTC ·
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:39:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:39:22.461625 2026] [security2:error] [pid 16855:tid 16855] [client 162.158.102.181:1015 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:39:22.461625 2026] [security2:error] [pid 16855:tid 16855] [client 162.158.102.181:10155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cameronwv.com"] [uri "/.git/config"] [unique_id "avGw6icSLyCdaQTlxSRXwQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:12:26
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:12:18.762351 2026] [security2:error] [pid 22602:tid 22602] [client 162.158.102.181:9877 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:12:18.762351 2026] [security2:error] [pid 22602:tid 22602] [client 162.158.102.181:9877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kiubo.net"] [uri "/.git/HEAD"] [unique_id "avGAYoV9cKx6LcXqhGj1zQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 07:29:18
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:24:51
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:24:44.650577 2026] [security2:error] [pid 21527:tid 21527] [client 162.158.102.181:1376 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:24:44.650577 2026] [security2:error] [pid 21527:tid 21527] [client 162.158.102.181:13765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.civilwarzone.com"] [uri "/.git/config"] [unique_id "avFZHBt1vPdGv_eZjtozsQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:31:54
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:31:51.472729 2026] [security2:error] [pid 10088:tid 10088] [client 162.158.102.181:1212 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:31:51.472729 2026] [security2:error] [pid 10088:tid 10088] [client 162.158.102.181:12127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "69strains.badgerkelley.com"] [uri "/.git/config"] [unique_id "avFMt_iL2qbC0u5TqflLVAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:16:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:16:05.725370 2026] [security2:error] [pid 11293:tid 11293] [client 162.158.102.181:1042 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:16:05.725370 2026] [security2:error] [pid 11293:tid 11293] [client 162.158.102.181:10426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.globalodit.com"] [uri "/.git/config"] [unique_id "avFJBTPIcvwStuyzzdVDggAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:05:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:05:51.435673 2026] [security2:error] [pid 30137:tid 30137] [client 162.158.102.181:1257 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:05:51.435673 2026] [security2:error] [pid 30137:tid 30137] [client 162.158.102.181:12572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.genevainvestors.com"] [uri "/.git/HEAD"] [unique_id "avEqf9zFgp71VDbXwrqzygAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack