🇺🇸
TPI-Abuse
2026-11-14 14:38:33
UTC ·
(37 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:38:24.996577 2026] [security2:error] [pid 1256088:tid 1256088] [client 162.158.102.30:10 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:38:24.996577 2026] [security2:error] [pid 1256088:tid 1256088] [client 162.158.102.30:10094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kevinlaliberte.com"] [uri "/.git/HEAD"] [unique_id "avhyYEgBSEHlix49cbtLFAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 13:45:37
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:45:32.228220 2026] [security2:error] [pid 20654:tid 20654] [client 162.158.102.30:14209] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:45:32.228220 2026] [security2:error] [pid 20654:tid 20654] [client 162.158.102.30:14209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "developerdove.com"] [uri "/.git/HEAD"] [unique_id "avhl_HQJFHQxrlZSUad3IgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-14 06:42:41
UTC ·
(8 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 05:23:11
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:23:03.045614 2026] [security2:error] [pid 18303:tid 18303] [client 162.158.102.30:9915] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:23:03.045614 2026] [security2:error] [pid 18303:tid 18303] [client 162.158.102.30:9915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbuttbikinis.com"] [uri "/.git/config"] [unique_id "avfwN4tL42W4US4Q875TrQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 04:13:43
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:13:38.952720 2026] [security2:error] [pid 11014:tid 11014] [client 162.158.102.30:12881] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:13:38.952720 2026] [security2:error] [pid 11014:tid 11014] [client 162.158.102.30:12881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brenna-droege.com"] [uri "/.git/config"] [unique_id "avff8mBxN16A7huDTbDxVAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 00:04:04
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:03:57.945178 2026] [security2:error] [pid 9352:tid 9352] [client 162.158.102.30:12696] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:03:57.945178 2026] [security2:error] [pid 9352:tid 9352] [client 162.158.102.30:12696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.warnock.ws"] [uri "/.git/config"] [unique_id "avelbUxvsRJ4f2fmTlwBSgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-11-13 22:06:54
UTC ·
(17 hours ago)
Probing for .git:
162.158.102.30 - - [13/Nov/2026:23:06:51 +0100] "GET /.git/config HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇳🇱
Alt255
2026-11-13 21:47:53
UTC ·
(17 hours ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.102.30 - - [13/Nov/2026:22:47:37 +0100] "GET /.git/HEAD HTTP/2.0" 301 504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/ ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.102.30 - - [13/Nov/2026:22:47:37 +0100] "GET /.git/HEAD HTTP/2.0" 301 504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Holger
2026-11-13 14:01:53
UTC ·
(1 day ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-11-13 13:32:09
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇧🇪
madeit
2026-11-13 12:45:04
UTC ·
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:02:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:02:07.617241 2026] [security2:error] [pid 3322:tid 3322] [client 162.158.102.30:11669] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:02:07.617241 2026] [security2:error] [pid 3322:tid 3322] [client 162.158.102.30:11669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kmp.net"] [uri "/.git/config"] [unique_id "avbgH1VFKC6eT9PzJs55wQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:12:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:12:22.840986 2026] [security2:error] [pid 21127:tid 21127] [client 162.158.102.30:9278] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:12:22.840986 2026] [security2:error] [pid 21127:tid 21127] [client 162.158.102.30:9278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.intelligent-design.net"] [uri "/.git/config"] [unique_id "avbUdkS92XKtaS2_zL7QQwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:12:07
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:11:59.231098 2026] [security2:error] [pid 11207:tid 11218] [client 162.158.102.30:12885] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:11:59.231098 2026] [security2:error] [pid 11207:tid 11218] [client 162.158.102.30:12885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mtiminis.com"] [uri "/.git/HEAD"] [unique_id "avYBb4Y7HgzUxMPFOm-nKAAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:00:54
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:00:50.298227 2026] [security2:error] [pid 28946:tid 28946] [client 162.158.102.30:9676] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:00:50.298227 2026] [security2:error] [pid 28946:tid 28946] [client 162.158.102.30:9676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cameronwv.com"] [uri "/.git/config"] [unique_id "avTXgiE5klsfqM0uLePB0QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
