🇩🇪
altenglaner
2026-11-11 23:40:45
UTC ·
(3 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:28:47
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:28:41.828577 2026] [security2:error] [pid 24989:tid 24989] [client 162.158.102.208:1431 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:28:41.828577 2026] [security2:error] [pid 24989:tid 24989] [client 162.158.102.208:14314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bestnebraskadetective.com"] [uri "/.git/config"] [unique_id "avTsGb_atEUXVzG-29uW0QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:06:24
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:06:19.945461 2026] [security2:error] [pid 12260:tid 12260] [client 162.158.102.208:1407 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:06:19.945461 2026] [security2:error] [pid 12260:tid 12260] [client 162.158.102.208:14074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grimone.com"] [uri "/.git/HEAD"] [unique_id "avTm26vpN2cbQ0oB1cGmsAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:46:25
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:46:21.109741 2026] [security2:error] [pid 9668:tid 9668] [client 162.158.102.208:12288] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:46:21.109741 2026] [security2:error] [pid 9668:tid 9668] [client 162.158.102.208:12288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "k2medianetworks.com"] [uri "/.git/config"] [unique_id "avTUHU7b1ctpAb0gwn0clgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-10 05:41:54
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇩🇪
Blexyel
2026-11-10 05:18:58
UTC ·
(1 day ago)
162.158.102.208 - - [10/Nov/2026:06:18:57 +0100] "GET /.git/config HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "share.fomx.gay"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:29:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:29:39.543812 2026] [security2:error] [pid 6590:tid 6590] [client 162.158.102.208:10939] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:29:39.543812 2026] [security2:error] [pid 6590:tid 6590] [client 162.158.102.208:10939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.andrejblatnik.com"] [uri "/.git/HEAD"] [unique_id "avKPo0VFzFxic9NDB3kwgQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:02:58
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:02:52.465339 2026] [security2:error] [pid 28292:tid 28292] [client 162.158.102.208:1035 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:02:52.465339 2026] [security2:error] [pid 28292:tid 28292] [client 162.158.102.208:10351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "noxiousthoughts.com"] [uri "/.git/HEAD"] [unique_id "avKJXPQDoV4E0iCVJu3TBAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
crnpekgoz
2026-11-07 05:54:51
UTC ·
(4 days ago)
Malicious HTTP GET request for '/.git/config' (HTTP 301) from 162.158.102.208. Threat: Web Güvenlik Açığı Taraması (.env/bot). Blocked by WardenGuard Web Shield.
Web App Attack
🇧🇪
madeit
2026-11-05 05:47:39
UTC ·
(6 days ago)
Web App Attack
🇹🇷
crnpekgoz
2026-11-02 09:16:31
UTC ·
(1 week ago)
Malicious HTTP GET request for '/wp-login.php' (HTTP 301) from 162.158.102.208. Threat: Web Güvenlik Açığı Taraması (.env/bot). Blocked by WardenGuard Web Shield.
Web App Attack
🇩🇪
thesimonmanuel
2026-11-01 18:33:32
UTC ·
(1 week ago)
162.158.102.208 - - [02/Nov/2026:00:03:31 +0530] "GET /.git/config HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "2a06:98c0:3600::103"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 09:04:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:04:05.131030 2026] [security2:error] [pid 28118:tid 28118] [client 162.158.102.208:9935 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:04:05.131030 2026] [security2:error] [pid 28118:tid 28118] [client 162.158.102.208:9935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mazzaro.chevronparkett.com"] [uri "/.git/HEAD"] [unique_id "aucAhW_Ye7Gl09KQTwi4ewAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 01:26:32
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:26:24.556223 2026] [security2:error] [pid 16233:tid 16233] [client 162.158.102.208:9921 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:26:24.556223 2026] [security2:error] [pid 16233:tid 16233] [client 162.158.102.208:9921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secureinitiatives.com.alanmariotti.com"] [uri "/.git/config"] [unique_id "at6sQHllblasiLAAW_w0TAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 19:08:06
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 15:08:00.525166 2026] [security2:error] [pid 11478:tid 11478] [client 162.158.102.208:1226 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 15:08:00.525166 2026] [security2:error] [pid 11478:tid 11478] [client 162.158.102.208:12264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "venturecg.com"] [uri "/.git/config"] [unique_id "at0CELXJZD8y0G4x2MqL_wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
