🇺🇸
TPI-Abuse
2026-11-08 14:49:04
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:48:59.319023 2026] [security2:error] [pid 7997:tid 8014] [client 162.158.103.34:12172] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:48:59.319023 2026] [security2:error] [pid 7997:tid 8014] [client 162.158.103.34:12172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.theworldinstituteofslowness.com"] [uri "/.git/HEAD"] [unique_id "avCL2yG8vIxrAv6Qh_Oz3QAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 12:28:13
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:28:08.569090 2026] [security2:error] [pid 16928:tid 16928] [client 162.158.103.34:9983] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:28:08.569090 2026] [security2:error] [pid 16928:tid 16928] [client 162.158.103.34:9983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scalacopilot.scala-global.com"] [uri "/.git/HEAD"] [unique_id "avBq2O0j0S4ZTnA0aH0o_AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
miriks
2026-11-08 10:09:18
UTC ·
(10 hours ago)
Automated scan detected: GET /.git/config — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0
Port Scan
Web App Attack
🇩🇪
FeG Deutschland
2026-11-08 07:48:50
UTC ·
(13 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
craudiovizai
2026-11-08 06:30:44
UTC ·
(14 hours ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked at the edge.
Web App Attack
Bad Web Bot
🇺🇸
francelink.fr
2026-11-08 06:29:24
UTC ·
(14 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T06:26:38.000Z.
Web App Attack
2026-11-08 06:15:17
UTC ·
(14 hours ago)
Web probing (1 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
Web App Attack
🇳🇱
Alt255
2026-11-08 05:37:14
UTC ·
(15 hours ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.34 - - [08/Nov/2026:06:37:04 +0100] "GET /.git/config HTTP/2.0" 301 509 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.34 - - [08/Nov/2026:06:37:04 +0100] "GET /.git/config HTTP/2.0" 301 509 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:32:44
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:32:36.740415 2026] [security2:error] [pid 18112:tid 18112] [client 162.158.103.34:12015] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:32:36.740415 2026] [security2:error] [pid 18112:tid 18112] [client 162.158.103.34:12015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dezdezero.com"] [uri "/.git/HEAD"] [unique_id "au_7ZLl0_fFCSSsb02vumQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:55:23
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:55:17.713755 2026] [security2:error] [pid 25440:tid 25440] [client 162.158.103.34:12259] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:55:17.713755 2026] [security2:error] [pid 25440:tid 25440] [client 162.158.103.34:12259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "littlehorneng.com"] [uri "/.git/HEAD"] [unique_id "au_ypSElC-8iR-LqLJeNpQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:06:59
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:06:51.848530 2026] [security2:error] [pid 13531:tid 13531] [client 162.158.103.34:13102] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:06:51.848530 2026] [security2:error] [pid 13531:tid 13531] [client 162.158.103.34:13102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.skinnywheels.com"] [uri "/.git/HEAD"] [unique_id "au_nSxCpHwIzxtD3gR3eHQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:27:54
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:27:50.373929 2026] [security2:error] [pid 25680:tid 25680] [client 162.158.103.34:11801] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:27:50.373929 2026] [security2:error] [pid 25680:tid 25680] [client 162.158.103.34:11801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greensborolimobus.com"] [uri "/.git/config"] [unique_id "au_eJklnr7Bn0Xea6Uz7IQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mravb
2026-11-08 01:06:03
UTC ·
(19 hours ago)
162.158.103.34 - - [08/Nov/2026:03:06:03 +0200] "GET /.git/HEAD HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Web App Attack
Hacking
🇧🇪
madeit
2026-10-31 04:49:59
UTC ·
(1 week ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 17:07:49
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:07:41.287689 2026] [security2:error] [pid 28657:tid 28657] [client 162.158.103.34:9359] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:07:41.287689 2026] [security2:error] [pid 28657:tid 28657] [client 162.158.103.34:9359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.com"] [uri "/.git/config"] [unique_id "atzl3XYSGNVb603bzGs7mgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
