🇺🇸
TPI-Abuse
2026-11-14 15:43:02
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:42:57.556162 2026] [security2:error] [pid 1464:tid 1464] [client 162.158.102.188:10102] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:42:57.556162 2026] [security2:error] [pid 1464:tid 1464] [client 162.158.102.188:10102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "relationshipecology.com"] [uri "/.git/config"] [unique_id "aviBgZYe4WXLlD5d9QbuIAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 11:32:55
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:32:51.336416 2026] [security2:error] [pid 539:tid 539] [client 162.158.102.188:10053] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:32:51.336416 2026] [security2:error] [pid 539:tid 539] [client 162.158.102.188:10053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.donnabeatty.com"] [uri "/.git/config"] [unique_id "avhG43jE52uu5sTzAt29hQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 08:35:30
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:35:22.520721 2026] [security2:error] [pid 12277:tid 12277] [client 162.158.102.188:1179 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:35:22.520721 2026] [security2:error] [pid 12277:tid 12277] [client 162.158.102.188:11794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelandkatie.us"] [uri "/.git/HEAD"] [unique_id "avgdSptOaSQ5JhuD2WGIhQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-11-14 08:07:57
UTC ·
(8 hours ago)
-:443 162.158.102.188 - - [14/Nov/2026:09:07:56 +0100] - "GET /.git/config HTTP/2.0" 404 55091 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-14 06:04:35
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:04:28.502760 2026] [security2:error] [pid 10866:tid 10866] [client 162.158.102.188:1236 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:04:28.502760 2026] [security2:error] [pid 10866:tid 10866] [client 162.158.102.188:12361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clinchspurs.com"] [uri "/.git/HEAD"] [unique_id "avf57BZZDFBLwm5mjJhz3AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:59:30
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:59:25.562382 2026] [security2:error] [pid 8289:tid 8347] [client 162.158.102.188:10032] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:59:25.562382 2026] [security2:error] [pid 8289:tid 8347] [client 162.158.102.188:10032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "denverdermatologist.aafm.us"] [uri "/.git/HEAD"] [unique_id "avfcnYsnB8n_mAVPH-M-wQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-11-13 23:12:51
UTC ·
(17 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits.
Web App Attack
🇩🇪
altenglaner
2026-11-13 21:53:30
UTC ·
(18 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 11:08:30
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:08:26.919096 2026] [security2:error] [pid 1790:tid 1790] [client 162.158.102.188:13727] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:08:26.919096 2026] [security2:error] [pid 1790:tid 1790] [client 162.158.102.188:13727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ozarkmountainwinetrail.org"] [uri "/.git/config"] [unique_id "avbvqkH6y55DVYjEfGPMvAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 04:42:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:42:27.474399 2026] [security2:error] [pid 23246:tid 23246] [client 162.158.102.188:1271 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:42:27.474399 2026] [security2:error] [pid 23246:tid 23246] [client 162.158.102.188:12711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "akramansari.mydobdate.net"] [uri "/.git/config"] [unique_id "avaVM_2IWfbzXe4s5zZ_0gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 13:20:06
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:20:00.147803 2026] [security2:error] [pid 17524:tid 17524] [client 162.158.102.188:1328 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:20:00.147803 2026] [security2:error] [pid 17524:tid 17524] [client 162.158.102.188:13283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozkanturker.com"] [uri "/.git/HEAD"] [unique_id "avW9AP8h63Qdt7zRmBVCBgAAAFo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:17:51
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:17:46.065950 2026] [security2:error] [pid 13678:tid 13678] [client 162.158.102.188:1042 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:17:46.065950 2026] [security2:error] [pid 13678:tid 13678] [client 162.158.102.188:10420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.yongmeihu.com"] [uri "/.git/config"] [unique_id "avVaCum5LaagVotioJyiXgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-11 23:40:45
UTC ·
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 18:10:22
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:10:14.957628 2026] [security2:error] [pid 23104:tid 23104] [client 162.158.102.188:1064 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:10:14.957628 2026] [security2:error] [pid 23104:tid 23104] [client 162.158.102.188:10649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.d-sinema.com"] [uri "/.git/config"] [unique_id "avSvhvccFS-IZ-Ravq-kVwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 14:13:54
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:13:46.605474 2026] [security2:error] [pid 15109:tid 15109] [client 162.158.102.188:9298 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:13:46.605474 2026] [security2:error] [pid 15109:tid 15109] [client 162.158.102.188:9298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cyberviews.club"] [uri "/.git/HEAD"] [unique_id "avR4GsOjMJM_y7yqUnKRdwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
