2026-11-09 15:07:58
UTC ·
(14 minutes ago)
Scanner hitting /.git/config on natsgw.ara-oman.com (CLOUDFLARENET) — aaguard
Brute-Force
Port Scan
🇺🇸
TPI-Abuse
2026-11-09 13:56:47
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:56:43.272908 2026] [security2:error] [pid 8784:tid 8784] [client 162.158.103.23:11895] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:56:43.272908 2026] [security2:error] [pid 8784:tid 8784] [client 162.158.103.23:11895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.homehealth101.com"] [uri "/.git/config"] [unique_id "avHRG6UFgUNEjHh7r1dQbQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 11:24:37
UTC ·
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:53:34
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:53:30.036042 2026] [security2:error] [pid 21444:tid 21444] [client 162.158.103.23:12504] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:53:30.036042 2026] [security2:error] [pid 21444:tid 21444] [client 162.158.103.23:12504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.marriedtv.com.whoore.com"] [uri "/.git/config"] [unique_id "avGYGn3AudqgM1dUCDrG8wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:06:42
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:06:36.813732 2026] [security2:error] [pid 23128:tid 23128] [client 162.158.103.23:12703] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:06:36.813732 2026] [security2:error] [pid 23128:tid 23128] [client 162.158.103.23:12703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alphadyne.com"] [uri "/.git/HEAD"] [unique_id "avF_DNZ0jxTt30twWJKLKQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:22:47
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:22:43.064646 2026] [security2:error] [pid 12843:tid 12843] [client 162.158.103.23:10009] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:22:43.064646 2026] [security2:error] [pid 12843:tid 12843] [client 162.158.103.23:10009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jwphotodesign.jonathanwilson.me"] [uri "/.git/config"] [unique_id "avFms157qRKrRkMhkBa6dgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:09:05
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:08:57.547835 2026] [security2:error] [pid 3942:tid 3942] [client 162.158.103.23:9512] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:08:57.547835 2026] [security2:error] [pid 3942:tid 3942] [client 162.158.103.23:9512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.technoware-lb.com"] [uri "/.git/config"] [unique_id "avFVaUbVFufy6oK5_1ZNbAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:36:16
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:36:10.109224 2026] [security2:error] [pid 2417:tid 2417] [client 162.158.103.23:11118] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:36:10.109224 2026] [security2:error] [pid 2417:tid 2417] [client 162.158.103.23:11118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.travelimts.com"] [uri "/.git/config"] [unique_id "avFNumx0FFUefIRwsMbwUgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
myintarweb
2026-11-09 02:39:23
UTC ·
(12 hours ago)
162.158.103.23 - - [09/Nov/2026:02:39:23 +0000] 443 "GET /.git/HEAD HTTP/2.0" 404 1147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:28:25
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:28:17.643434 2026] [security2:error] [pid 32536:tid 32536] [client 162.158.103.23:9374] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:28:17.643434 2026] [security2:error] [pid 32536:tid 32536] [client 162.158.103.23:9374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.arsenalfordemocracy.com"] [uri "/.git/HEAD"] [unique_id "avEvwUaXCnbRNORLMtxTCAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:47:07
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:46:59.236362 2026] [security2:error] [pid 21676:tid 21676] [client 162.158.103.23:10528] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:46:59.236362 2026] [security2:error] [pid 21676:tid 21676] [client 162.158.103.23:10528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.woosterclassof64.com"] [uri "/.git/HEAD"] [unique_id "avEmE0d6wT7fUNwze6XlogAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:57:28
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:57:19.928565 2026] [security2:error] [pid 27310:tid 27310] [client 162.158.103.23:12697] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:57:19.928565 2026] [security2:error] [pid 27310:tid 27310] [client 162.158.103.23:12697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.gizmolabs.net"] [uri "/.git/config"] [unique_id "avEab4_ZuC9Lb170_2yQGwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-11-08 23:30:38
UTC ·
(15 hours ago)
162.158.103.23 - - [08/Nov/2026:16:30:37 -0700] "GET /.git/config HTTP/2.0" 300 4449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Web App Attack
🇩🇪
Blexyel
2026-11-08 11:16:14
UTC ·
(1 day ago)
162.158.103.23 - - [08/Nov/2026:12:16:13 +0100] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 08:04:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:03:53.835531 2026] [security2:error] [pid 24035:tid 24121] [client 162.158.103.23:12167] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:03:53.835531 2026] [security2:error] [pid 24035:tid 24121] [client 162.158.103.23:12167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaelaccounting.antidote-it.com"] [uri "/.git/config"] [unique_id "avAs6bhGTd9oQSS6cTL6WwAAAdg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
