🇺🇸
TPI-Abuse
2026-11-08 15:26:57
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:26:52.383650 2026] [security2:error] [pid 13446:tid 13446] [client 162.158.103.151:1178 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:26:52.383650 2026] [security2:error] [pid 13446:tid 13446] [client 162.158.103.151:11782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cgiaquaticcare.com.virginiabeachlovebird.com"] [uri "/.git/HEAD"] [unique_id "avCUvL5Oy_2lWL9unoqm6wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 08:27:49
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:27:43.782212 2026] [security2:error] [pid 4312:tid 4312] [client 162.158.103.151:9490] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:27:43.782212 2026] [security2:error] [pid 4312:tid 4312] [client 162.158.103.151:9490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clinicadentaldiaz.aticom.es"] [uri "/.git/HEAD"] [unique_id "avAyf93fO-gaIE-QhtpLAQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:27:51
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:27:46.762771 2026] [security2:error] [pid 6920:tid 6920] [client 162.158.103.151:10903] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:27:46.762771 2026] [security2:error] [pid 6920:tid 6920] [client 162.158.103.151:10903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cozydesignae.com"] [uri "/.git/config"] [unique_id "au_6QpwpRXDB6UZQeR8FfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:46:31
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:46:27.065457 2026] [security2:error] [pid 25909:tid 25909] [client 162.158.103.151:1282 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:46:27.065457 2026] [security2:error] [pid 25909:tid 25909] [client 162.158.103.151:12825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citadeltitle.com"] [uri "/.git/HEAD"] [unique_id "au_ig-3O-Z_JFlGFa05nBwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:29:15
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:29:11.622901 2026] [security2:error] [pid 25613:tid 25613] [client 162.158.103.151:1037 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:29:11.622901 2026] [security2:error] [pid 25613:tid 25613] [client 162.158.103.151:10372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "epowersupplyusa.com"] [uri "/.git/config"] [unique_id "au_ed1YjOVC1q3vH5f7BdwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:13:16
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:13:10.425104 2026] [security2:error] [pid 32640:tid 32640] [client 162.158.103.151:1121 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:13:10.425104 2026] [security2:error] [pid 32640:tid 32640] [client 162.158.103.151:11211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brittb.com"] [uri "/.git/config"] [unique_id "au_MppUvUBAcv-C9KCawDgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:46:16
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:46:08.698065 2026] [security2:error] [pid 31837:tid 31837] [client 162.158.103.151:1084 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:46:08.698065 2026] [security2:error] [pid 31837:tid 31837] [client 162.158.103.151:10841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "somewierdness.com"] [uri "/.git/HEAD"] [unique_id "au_GUEyjVSc9kopybvk7sQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-07 23:32:27
UTC ·
(23 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 21:52:08
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:52:01.056558 2026] [security2:error] [pid 27659:tid 27659] [client 162.158.103.151:1109 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:52:01.056558 2026] [security2:error] [pid 27659:tid 27659] [client 162.158.103.151:11099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cabrynpoodles.com"] [uri "/.git/HEAD"] [unique_id "au-dgfClSQFIhogx3ExlzAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Grossmann-Gruppe
2026-11-06 22:34:00
UTC ·
(2 days ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
🇩🇪
Hary74656
2026-11-02 20:04:07
UTC ·
(6 days ago)
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 162.158.103.151] [realclient 162.158.103.151] [02/Nov/2026:21:04:06 +0100] [vhost vw.aschi.at] 403 "GET /.git/config HTTP/2.0"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 15:26:02
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 10:25:56.038724 2026] [security2:error] [pid 11579:tid 11599] [client 162.158.103.151:1184 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 10:25:56.038724 2026] [security2:error] [pid 11579:tid 11599] [client 162.158.103.151:11842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proracersecrets.xxxmain.com"] [uri "/.git/config"] [unique_id "audaBPmT4QUVtPqMqGvUbgAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 02:50:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:50:45.700031 2026] [security2:error] [pid 32456:tid 32456] [client 162.158.103.151:1373 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:50:45.700031 2026] [security2:error] [pid 32456:tid 32456] [client 162.158.103.151:13739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.impressionista.net"] [uri "/.git/HEAD"] [unique_id "at1uhVwkEm77xlyqp4kHcQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-24 21:59:51
UTC ·
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-10-24
Web App Attack
SSH
Hacking
Anonymous
2026-10-24 04:55:37
UTC ·
(2 weeks ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack