2026-11-09 22:06:07
UTC ·
(2 hours ago)
Trying to access config files
Web App Attack
🇺🇸
francelink.fr
2026-11-09 20:25:26
UTC ·
(4 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T20:23:50.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:58:05
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:57:57.953332 2026] [security2:error] [pid 20075:tid 20075] [client 162.158.102.250:1193 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:57:57.953332 2026] [security2:error] [pid 20075:tid 20075] [client 162.158.102.250:11933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.accomplishedmagazine.com"] [uri "/.git/HEAD"] [unique_id "avHDVSm4-9G4htsf1wAIwwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:36:13
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:36:08.145843 2026] [security2:error] [pid 28934:tid 28934] [client 162.158.102.250:9698 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:36:08.145843 2026] [security2:error] [pid 28934:tid 28934] [client 162.158.102.250:9698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.gsvip.com.ec"] [uri "/.git/config"] [unique_id "avGwKM7HEFmiygVolIYzkAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:16:36
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:16:31.691342 2026] [security2:error] [pid 12830:tid 12830] [client 162.158.102.250:9350 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:16:31.691342 2026] [security2:error] [pid 12830:tid 12830] [client 162.158.102.250:9350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gapanda.com"] [uri "/.git/HEAD"] [unique_id "avGdf-6-l6EfEwYPJV1nZAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-11-09 09:22:41
UTC ·
(15 hours ago)
Probing for .git:
162.158.102.250 - - [09/Nov/2026:10:22:39 +0100] "GET /.git/config HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:03:32
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:03:24.569842 2026] [security2:error] [pid 82196:tid 82303] [client 162.158.102.250:1404 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:03:24.569842 2026] [security2:error] [pid 82196:tid 82303] [client 162.158.102.250:14045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.charteredwealthmanager.com"] [uri "/.git/config"] [unique_id "avGMXMWSvq2sq4dF0bUzagAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:32:09
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:32:03.693446 2026] [security2:error] [pid 1647:tid 1647] [client 162.158.102.250:10936] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:32:03.693446 2026] [security2:error] [pid 1647:tid 1647] [client 162.158.102.250:10936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.stevestoyostove.com"] [uri "/.git/HEAD"] [unique_id "avFa06skbQV1-_bJp98ZNwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-11-09 05:11:59
UTC ·
(19 hours ago)
162.158.102.250 - - [09/Nov/2026:06:11:59 +0100] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:55:43
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:55:37.945304 2026] [security2:error] [pid 31433:tid 31433] [client 162.158.102.250:1037 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:55:37.945304 2026] [security2:error] [pid 31433:tid 31433] [client 162.158.102.250:10377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.guardmagic.com"] [uri "/.git/HEAD"] [unique_id "avFSScoRVCsZAS7J-ex0HgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:42:45
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:42:40.387333 2026] [security2:error] [pid 20735:tid 20735] [client 162.158.102.250:1382 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:42:40.387333 2026] [security2:error] [pid 20735:tid 20735] [client 162.158.102.250:13825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bigchus.com"] [uri "/.git/HEAD"] [unique_id "avEzIJPungssDxQE6-jVQAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Thaliruth
2026-11-09 02:28:27
UTC ·
(22 hours ago)
[09/Nov/2026:03:28:26.573313 +0100] avEvyud2on1cfyu3eqshwgAAAFc 162.158.102.250 54150 127.0.0.1 7081
...
Hacking
🇺🇸
TPI-Abuse
2026-11-09 02:25:00
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:24:55.630652 2026] [security2:error] [pid 3165:tid 3165] [client 162.158.102.250:11512] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:24:55.630652 2026] [security2:error] [pid 3165:tid 3165] [client 162.158.102.250:11512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.genescleaners.com"] [uri "/.git/config"] [unique_id "avEu9yrh-VHj7jorgQz5zwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-09 01:49:32
UTC ·
(23 hours ago)
[MonNov0902:49:24.4198152026][security2:error][pid2041969:tid2042036][client162.158.102.250:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960 ...
show more
[MonNov0902:49:24.4198152026][security2:error][pid2041969:tid2042036][client162.158.102.250:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"webmail.labaita-lanzo.it\"][uri\"/.git/config\"][unique_id\"avEmpHiW-2oyv7-9eTp4fAAAAQA\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:56:14
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:56:05.632414 2026] [security2:error] [pid 12017:tid 12017] [client 162.158.102.250:9409 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:56:05.632414 2026] [security2:error] [pid 12017:tid 12017] [client 162.158.102.250:9409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.infinite-fitness.com"] [uri "/.git/HEAD"] [unique_id "avEaJYjicCW7fh1pvoPuMgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
