🇺🇸
TPI-Abuse
2026-11-09 08:00:31
UTC ·
(11 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:00:24.085696 2026] [security2:error] [pid 9562:tid 9562] [client 162.158.102.51:9467] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:00:24.085696 2026] [security2:error] [pid 9562:tid 9562] [client 162.158.102.51:9467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nolaanimereviews.com"] [uri "/.git/config"] [unique_id "avF9mJBkuxReKa5X-n93DQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:30:43
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:30:36.224327 2026] [security2:error] [pid 583:tid 583] [client 162.158.102.51:10629] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:30:36.224327 2026] [security2:error] [pid 583:tid 583] [client 162.158.102.51:10629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.timeless.acupressbooks.com"] [uri "/.git/HEAD"] [unique_id "avFafDumK2UT_33gG9J7rQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:16:49
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:16:44.818043 2026] [security2:error] [pid 9841:tid 9852] [client 162.158.102.51:10519] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:16:44.818043 2026] [security2:error] [pid 9841:tid 9852] [client 162.158.102.51:10519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.landmarkocchealth.com"] [uri "/.git/config"] [unique_id "avFJLFdHQX51gMa6HjnztQAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 03:29:57
UTC ·
(4 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:25:36
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:25:32.134963 2026] [security2:error] [pid 11814:tid 11814] [client 162.158.102.51:12319] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:25:32.134963 2026] [security2:error] [pid 11814:tid 11814] [client 162.158.102.51:12319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.listerman.org"] [uri "/.git/config"] [unique_id "avE9LJJfINBaPkUNk7-YvwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:33:47
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:33:38.819726 2026] [security2:error] [pid 23921:tid 23921] [client 162.158.102.51:13902] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:33:38.819726 2026] [security2:error] [pid 23921:tid 23921] [client 162.158.102.51:13902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.freemanfoundationcle.org"] [uri "/.git/HEAD"] [unique_id "avEU4j5tmwe23gosYTYJzQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-08 20:24:50
UTC ·
(11 hours ago)
162.158.102.51 - - [08/Nov/2026:21:24:49 +0100] "GET /.git/HEAD HTTP/1.1" 200 3264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-11-08 09:47:48
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:47:44.584692 2026] [security2:error] [pid 23321:tid 23321] [client 162.158.102.51:13153] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:47:44.584692 2026] [security2:error] [pid 23321:tid 23321] [client 162.158.102.51:13153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web19.dnchosting.com"] [uri "/.git/config"] [unique_id "avBFQKhyVTPJ3pxVGYlIKwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:46:38
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:46:33.264139 2026] [security2:error] [pid 32352:tid 32352] [client 162.158.102.51:10984] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:46:33.264139 2026] [security2:error] [pid 32352:tid 32352] [client 162.158.102.51:10984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "petiteplaisanceconservationfund.org"] [uri "/.git/HEAD"] [unique_id "au_-qVzgDscArgeXwduh8QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Smish
2026-11-08 04:11:48
UTC ·
(1 day ago)
HONEYPOT HIT --> Fail2ban time=1794111106 log=2026-11-08T04:11:46+00:00 ip=162.158.102.51 host=as210667.net method=GET uri="/.git/HEAD" status=404 ua="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 ...
show more
HONEYPOT HIT --> Fail2ban time=1794111106 log=2026-11-08T04:11:46+00:00 ip=162.158.102.51 host=as210667.net method=GET uri="/.git/HEAD" status=404 ua="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ref="-" rid=6dc7afaa9a2bfdddd5386ba7161a502a
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:19:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:18:59.882464 2026] [security2:error] [pid 16213:tid 16213] [client 162.158.102.51:13951] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:18:59.882464 2026] [security2:error] [pid 16213:tid 16213] [client 162.158.102.51:13951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yourbrandhere.com"] [uri "/.git/HEAD"] [unique_id "au_cE1OB3Pu3YxEDkNg6tAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:16:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:16:08.658841 2026] [security2:error] [pid 25949:tid 25949] [client 162.158.102.51:11960] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:16:08.658841 2026] [security2:error] [pid 25949:tid 25949] [client 162.158.102.51:11960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colodist.com"] [uri "/.git/config"] [unique_id "au_NWHabg2nLCMKLZa9UEgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mxbl
2026-11-08 00:35:07
UTC ·
(1 day ago)
Scanning for CMS vulnerabilities on a non-CMS system: /.git/HEAD
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:04:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:03:56.050890 2026] [security2:error] [pid 2393621:tid 2393646] [client 162.158.102.51:13 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:03:56.050890 2026] [security2:error] [pid 2393621:tid 2393646] [client 162.158.102.51:13340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scottspencergfx.com"] [uri "/.git/config"] [unique_id "au-gTLRMV-8Cy0YJYW007AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-10-26 02:13:00
UTC ·
(2 weeks ago)
162.158.102.51 - - [26/Oct/2026:03:13:00 +0100] "GET /.git/config HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "v.pingusmc.org"
...
Brute-Force
Web App Attack
