🇨🇭
TheCoon
2026-11-08 06:48:20
UTC ·
(48 minutes ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-08 04:15:16
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:15:09.561527 2026] [security2:error] [pid 21377:tid 21377] [client 162.158.103.108:1246 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:15:09.561527 2026] [security2:error] [pid 21377:tid 21377] [client 162.158.103.108:12469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qbots.cevhersys.com"] [uri "/.git/config"] [unique_id "au_3TQnEH9Rf0bLxp_ybVgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:26:50
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:26:44.099103 2026] [security2:error] [pid 32538:tid 32538] [client 162.158.103.108:1086 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:26:44.099103 2026] [security2:error] [pid 32538:tid 32538] [client 162.158.103.108:10867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pr-professional.com"] [uri "/.git/config"] [unique_id "au_r9N1exlXvv8nVR9iPSgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:56:15
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:56:11.589548 2026] [security2:error] [pid 23043:tid 23043] [client 162.158.103.108:1324 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:56:11.589548 2026] [security2:error] [pid 23043:tid 23043] [client 162.158.103.108:13245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "generationedm.com"] [uri "/.git/HEAD"] [unique_id "au_ky2hT1xFJOmBwNzxCCgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:17:19
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:17:13.591917 2026] [security2:error] [pid 16727:tid 16727] [client 162.158.103.108:1160 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:17:13.591917 2026] [security2:error] [pid 16727:tid 16727] [client 162.158.103.108:11609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thewhitedfamily.com"] [uri "/.git/config"] [unique_id "au_bqVP1gl70FUTDmmjc-wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-08 02:02:31
UTC ·
(5 hours ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.108 - - [08/Nov/2026:03:02:11 +0100] "GET /.git/config HTTP/2.0" 301 532 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.108 - - [08/Nov/2026:03:02:11 +0100] "GET /.git/config HTTP/2.0" 301 532 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-07 22:57:23
UTC ·
(8 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-07T22:55:12.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:39:57
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:39:52.800322 2026] [security2:error] [pid 10253:tid 10253] [client 162.158.103.108:1079 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:39:52.800322 2026] [security2:error] [pid 10253:tid 10253] [client 162.158.103.108:10790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "footballxp.com"] [uri "/.git/HEAD"] [unique_id "au-ouPji5fVuYfhqkkFyZQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 21:37:41
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:37:36.250742 2026] [security2:error] [pid 26709:tid 26709] [client 162.158.103.108:1036 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:37:36.250742 2026] [security2:error] [pid 26709:tid 26709] [client 162.158.103.108:10368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wandathelittlestwizard.com"] [uri "/.git/config"] [unique_id "au-aIJDvYdgzHdfjBjj0YgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-02 16:03:29
UTC ·
(5 days ago)
host=- server=- ip=162.158.103.108 method=GET req=/.git/config uri=/unknown-host.html status=404 bytes=1188 rt=0.001 urt=- lr=- ref="-" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-02 07:30:49
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:30:42.257281 2026] [security2:error] [pid 5873:tid 5873] [client 162.158.103.108:11368] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:30:42.257281 2026] [security2:error] [pid 5873:tid 5873] [client 162.158.103.108:11368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uheep2.spaceritual.net"] [uri "/.git/config"] [unique_id "aug8IgaWpfvxtQknX_z_awAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-10-31 13:11:35
UTC ·
(1 week ago)
162.158.103.108 - - [31/Oct/2026:15:11:35 +0200] "GET /admin/login HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Hacking
Web App Attack
🇧🇬
Stoyko Stoykov
2026-10-23 02:32:48
UTC ·
(2 weeks ago)
162.158.103.108 - - [23/Oct/2026:05:32:48 +0300] "GET /wp-json/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 23:25:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:25:19.786981 2026] [security2:error] [pid 13544:tid 13544] [client 162.158.103.108:1321 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:25:19.786981 2026] [security2:error] [pid 13544:tid 13544] [client 162.158.103.108:13216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tatying.com"] [uri "/.git/HEAD"] [unique_id "atlJ30FkMc0nL7UhUHojkwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-18 12:56:42
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack