🇺🇸
TPI-Abuse
2026-11-09 08:40:13
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:40:06.547802 2026] [security2:error] [pid 10447:tid 10447] [client 162.158.102.73:9818] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:40:06.547802 2026] [security2:error] [pid 10447:tid 10447] [client 162.158.102.73:9818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.m.bluegrassexpressband.com"] [uri "/.git/config"] [unique_id "avGG5j-VlQcXsaHtt8XUlwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-09 05:36:22
UTC ·
(6 hours ago)
[09/Nov/2026:07:36:22 +0200] -- 162.158.102.73 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:09:51
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:09:43.229399 2026] [security2:error] [pid 31490:tid 31490] [client 162.158.102.73:12803] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:09:43.229399 2026] [security2:error] [pid 31490:tid 31490] [client 162.158.102.73:12803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psystems.net"] [uri "/.git/HEAD"] [unique_id "avFVl7EaiY33TJoLDgOMEwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:53:45
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:53:38.166925 2026] [security2:error] [pid 14546:tid 14546] [client 162.158.102.73:10024] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:53:38.166925 2026] [security2:error] [pid 14546:tid 14546] [client 162.158.102.73:10024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimrichardart.com"] [uri "/.git/config"] [unique_id "avFR0jeJ4vyYEmZ3fNULUQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:04:15
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:04:11.753881 2026] [security2:error] [pid 30792:tid 30792] [client 162.158.102.73:11101] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:04:11.753881 2026] [security2:error] [pid 30792:tid 30792] [client 162.158.102.73:11101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.genesis-one.com"] [uri "/.git/config"] [unique_id "avE4KxPTM3uyytrv4LPt_gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:20:40
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:20:36.712864 2026] [security2:error] [pid 10821:tid 10841] [client 162.158.102.73:12552] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:20:36.712864 2026] [security2:error] [pid 10821:tid 10841] [client 162.158.102.73:12552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web201.dnchosting.com"] [uri "/.git/HEAD"] [unique_id "avEt9PKmWUHsP6Bfd_6y2QAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tsZero
2026-11-09 02:05:33
UTC ·
(9 hours ago)
Scan example: path=/.git/HEAD status=404
Hacking
🇺🇸
TPI-Abuse
2026-11-09 01:37:29
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:37:25.243674 2026] [security2:error] [pid 3174:tid 3174] [client 162.158.102.73:11219] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:37:25.243674 2026] [security2:error] [pid 3174:tid 3174] [client 162.158.102.73:11219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accu-tuner.com"] [uri "/.git/HEAD"] [unique_id "avEj1VuIROM2FcDSH_URsgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:37:31
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:37:22.365377 2026] [security2:error] [pid 6790:tid 6790] [client 162.158.102.73:11330] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:37:22.365377 2026] [security2:error] [pid 6790:tid 6790] [client 162.158.102.73:11330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.salazartransfers.com"] [uri "/.git/HEAD"] [unique_id "avEVwpuC_ip3mv3exAPK4QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:29:36
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:29:30.512907 2026] [security2:error] [pid 22839:tid 22839] [client 162.158.102.73:12899] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:29:30.512907 2026] [security2:error] [pid 22839:tid 22839] [client 162.158.102.73:12899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thebestac.com"] [uri "/.git/HEAD"] [unique_id "avCjanxKK-FOWk5hSuOfTwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-08 07:55:25
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T07:53:11.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:39:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:39:22.171912 2026] [security2:error] [pid 19571:tid 19571] [client 162.158.102.73:9663] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:39:22.171912 2026] [security2:error] [pid 19571:tid 19571] [client 162.158.102.73:9663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naturev.net"] [uri "/.git/HEAD"] [unique_id "au_u6oP7-loQeIrB35v-3AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
securejdprop
2026-11-08 03:25:07
UTC ·
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.
Hacking
🇺🇸
TPI-Abuse
2026-11-08 01:58:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:57:57.535989 2026] [security2:error] [pid 16218:tid 16218] [client 162.158.102.73:13138] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.102.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:57:57.535989 2026] [security2:error] [pid 16218:tid 16218] [client 162.158.102.73:13138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "littlebiglebanon.com"] [uri "/.git/config"] [unique_id "au_XJZLR-ZnsRmLQOYo81wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-08 00:29:18
UTC ·
(1 day ago)
Accessed trap at '/.git/config'
Web App Attack