🇩🇪
FeG Deutschland
2026-11-09 14:10:43
UTC ·
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:05:08
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:05:04.506259 2026] [security2:error] [pid 4134:tid 4134] [client 162.158.103.12:10639] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:05:04.506259 2026] [security2:error] [pid 4134:tid 4134] [client 162.158.103.12:10639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.vittariahealth.com"] [uri "/.git/HEAD"] [unique_id "avHTEGu-fPGySfLO7S-vUwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:40:10
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:40:03.583053 2026] [security2:error] [pid 2437:tid 2437] [client 162.158.103.12:10257] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:40:03.583053 2026] [security2:error] [pid 2437:tid 2437] [client 162.158.103.12:10257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cams.boens.org"] [uri "/.git/config"] [unique_id "avG_Iwue-ClfOP7V6H0pcwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:56:35
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:56:32.350077 2026] [security2:error] [pid 16931:tid 16931] [client 162.158.103.12:10220] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:56:32.350077 2026] [security2:error] [pid 16931:tid 16931] [client 162.158.103.12:10220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.otcraftworks.com"] [uri "/.git/HEAD"] [unique_id "avG08I7X3Dv9Z6t84nJ24wAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:32:21
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:32:15.230245 2026] [security2:error] [pid 20165:tid 20165] [client 162.158.103.12:11375] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:32:15.230245 2026] [security2:error] [pid 20165:tid 20165] [client 162.158.103.12:11375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thecalls.net"] [uri "/.git/HEAD"] [unique_id "avGhLyPthZYTByJSc39eLAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:12:05
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:11:59.648681 2026] [security2:error] [pid 11473:tid 11473] [client 162.158.103.12:12368] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:11:59.648681 2026] [security2:error] [pid 11473:tid 11473] [client 162.158.103.12:12368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.okeetokee.org"] [uri "/.git/config"] [unique_id "avGcb-XgNhcyFY5sSs7PywAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CBJ
2026-11-09 05:11:28
UTC ·
(15 hours ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:46:09
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:46:04.923327 2026] [security2:error] [pid 28189:tid 28189] [client 162.158.103.12:9388] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:46:04.923327 2026] [security2:error] [pid 28189:tid 28189] [client 162.158.103.12:9388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.htu.wholesalelivelobsters.com"] [uri "/.git/HEAD"] [unique_id "avFQDMSAN-fc78o1l8IbAAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:37:37
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:37:30.851333 2026] [security2:error] [pid 30415:tid 30415] [client 162.158.103.12:10200] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:37:30.851333 2026] [security2:error] [pid 30415:tid 30415] [client 162.158.103.12:10200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gapanda.com"] [uri "/.git/HEAD"] [unique_id "avE_-uPHPD5Dl8khgoc5zwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:35:47
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:35:44.090028 2026] [security2:error] [pid 1285:tid 1285] [client 162.158.103.12:10488] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:35:44.090028 2026] [security2:error] [pid 1285:tid 1285] [client 162.158.103.12:10488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gilbert-consulting.com"] [uri "/.git/config"] [unique_id "avExgLMT_lNzyXKvd6T7pAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:43:57
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:43:53.497397 2026] [security2:error] [pid 17573:tid 17573] [client 162.158.103.12:12253] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:43:53.497397 2026] [security2:error] [pid 17573:tid 17573] [client 162.158.103.12:12253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "demo.mecme.co"] [uri "/.git/config"] [unique_id "avEXSdXMQv9tvd1HVIWrAgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 14:08:28
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:08:24.148204 2026] [security2:error] [pid 29949:tid 29949] [client 162.158.103.12:10752] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:08:24.148204 2026] [security2:error] [pid 29949:tid 29949] [client 162.158.103.12:10752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carlgrauelcsw.com.onyxcc.com"] [uri "/.git/HEAD"] [unique_id "avCCWHgySIId0HC_XyDKhQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 13:35:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:35:53.108167 2026] [security2:error] [pid 6857:tid 6857] [client 162.158.103.12:12235] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:35:53.108167 2026] [security2:error] [pid 6857:tid 6857] [client 162.158.103.12:12235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "purebinary.cathrynn.com"] [uri "/.git/config"] [unique_id "avB6udolbUKlT4y-CVj8GgAAAHg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-08 13:21:34
UTC ·
(1 day ago)
Automated report (2026-11-08T21:21:34+08:00). Caught probing for exposed Git data.
Hacking
Web App Attack
🇩🇪
thesimonmanuel
2026-11-08 12:59:02
UTC ·
(1 day ago)
162.158.103.12 - - [08/Nov/2026:18:29:00 +0530] "GET /.git/config HTTP/2.0" 404 18326 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "2a06:98c0:3600::103"
Web App Attack
