🇺🇸
TPI-Abuse
2026-11-14 15:36:30
UTC ·
(36 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:36:23.411126 2026] [security2:error] [pid 31864:tid 31864] [client 162.158.102.204:1274 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 10:36:23.411126 2026] [security2:error] [pid 31864:tid 31864] [client 162.158.102.204:12745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "389thbg.com"] [uri "/.git/HEAD"] [unique_id "avh_92oQF4MA-CWncHp6ZwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 14:06:38
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:06:30.690339 2026] [security2:error] [pid 4227:tid 4227] [client 162.158.102.204:10532] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:06:30.690339 2026] [security2:error] [pid 4227:tid 4227] [client 162.158.102.204:10532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrobertsignaturehomes.com"] [uri "/.git/HEAD"] [unique_id "avhq5gAlq008Ttu3CrI9lwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 13:20:31
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:20:24.274678 2026] [security2:error] [pid 21245:tid 21245] [client 162.158.102.204:1173 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:20:24.274678 2026] [security2:error] [pid 21245:tid 21245] [client 162.158.102.204:11737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "countrysideinnkingston.com"] [uri "/.git/HEAD"] [unique_id "avhgGPTpj-SergjxHgHvRAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-14 07:03:36
UTC ·
(9 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:53:19
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:53:12.603336 2026] [security2:error] [pid 11451:tid 11476] [client 162.158.102.204:1430 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:53:12.603336 2026] [security2:error] [pid 11451:tid 11476] [client 162.158.102.204:14301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.newsrank.us"] [uri "/.git/HEAD"] [unique_id "avfbKDeuCYn2a_7Fq7UGtwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:31:48
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:31:44.432075 2026] [security2:error] [pid 18600:tid 18600] [client 162.158.102.204:1129 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:31:44.432075 2026] [security2:error] [pid 18600:tid 18600] [client 162.158.102.204:11291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roblesfamilia.com"] [uri "/.git/config"] [unique_id "avfWIFy_uo60dIb4ELwozQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-11-14 02:14:33
UTC ·
(13 hours ago)
plesk-modsecurity - IP: 162.158.102.204 - [14/Nov/2026:02:59:52.456427 +0100] avfAmNNGFoDw8yashCNImwAAAIw 162.158.102.204 52752 127.0.0.1 7081 [14/Nov/2026:02:59:58.114761 +0100] avfAntNGFoDw8yashCNIqQAAAI0 162.158.102.204 37218 127.0.0.1 7081 [14/N ...
show more
plesk-modsecurity - IP: 162.158.102.204 - [14/Nov/2026:02:59:52.456427 +0100] avfAmNNGFoDw8yashCNImwAAAIw 162.158.102.204 52752 127.0.0.1 7081 [14/Nov/2026:02:59:58.114761 +0100] avfAntNGFoDw8yashCNIqQAAAI0 162.158.102.204 37218 127.0.0.1 7081 [14/Nov/2026:02:59:58.119336 +0100] avfAntNGFoDw8yashCNIqgAAAIw 162.158.102.204 37232 127.0.0.1 7081 [14/Nov/2026:03:14:33.270571 +0100] avfECbCGN820UyVUCNIkQAAAABA 162.158.102.204 54918 127.0.0.1 7081
show less
Web App Attack
🇫🇮
cleverest.eu
2026-11-13 20:55:25
UTC ·
(19 hours ago)
MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / vcs_probe"}
Web App Attack
🇩🇪
Kreapptivo
2026-11-13 19:33:11
UTC ·
(20 hours ago)
162.158.102.204 - - [13/Nov/2026:20:33:09 +0100] "GET /.git/config HTTP/2.0" 404 822 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
Web App Attack
Anonymous
2026-11-13 15:05:15
UTC ·
(1 day ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:09:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:09:46.669189 2026] [security2:error] [pid 8363:tid 8363] [client 162.158.102.204:11610] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:09:46.669189 2026] [security2:error] [pid 8363:tid 8363] [client 162.158.102.204:11610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fishleadership.org"] [uri "/.git/config"] [unique_id "avbh6ofOFV3QE6fPIkXmiQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 06:23:52
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:23:48.627308 2026] [security2:error] [pid 9033:tid 9033] [client 162.158.102.204:14125] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:23:48.627308 2026] [security2:error] [pid 9033:tid 9033] [client 162.158.102.204:14125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.al-ketab.net"] [uri "/.git/config"] [unique_id "avas9CCYcV4Qk6-uB9m2PwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 11:18:43
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:18:36.677275 2026] [security2:error] [pid 15598:tid 15598] [client 162.158.102.204:1317 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:18:36.677275 2026] [security2:error] [pid 15598:tid 15598] [client 162.158.102.204:13179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.usoilinc.com"] [uri "/.git/HEAD"] [unique_id "avWgjO2aGR03dDnNYOtW7AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 03:56:53
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:56:46.235358 2026] [security2:error] [pid 25543:tid 25543] [client 162.158.102.204:9392 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:56:46.235358 2026] [security2:error] [pid 25543:tid 25543] [client 162.158.102.204:9392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.therustedtree.com"] [uri "/.git/HEAD"] [unique_id "avU4_sY6VR7Ad7A4FfdyBgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 00:05:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 19:04:59.487955 2026] [security2:error] [pid 19462:tid 19462] [client 162.158.102.204:1299 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 19:04:59.487955 2026] [security2:error] [pid 19462:tid 19462] [client 162.158.102.204:12993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sandiegovacationrentals.com"] [uri "/.git/config"] [unique_id "avUCq1YMHdZgiJlROjC1DAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack