🇺🇸
TPI-Abuse
2026-11-15 01:13:17
UTC ·
(10 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:13:11.282409 2026] [security2:error] [pid 17981:tid 17981] [client 162.158.103.35:12735] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:13:11.282409 2026] [security2:error] [pid 17981:tid 17981] [client 162.158.103.35:12735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jawsite.org"] [uri "/.git/HEAD"] [unique_id "avkHJ-2zjly7rN6mdHmz9AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-15 00:39:24
UTC ·
(44 minutes ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.35 - - [15/Nov/2026:01:39:04 +0100] "GET /.git/HEAD HTTP/2.0" 403 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.35 - - [15/Nov/2026:01:39:04 +0100] "GET /.git/HEAD HTTP/2.0" 403 1974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-15 00:12:02
UTC ·
(1 hour ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇧🇪
boxed-it
2026-11-14 21:06:49
UTC ·
(4 hours ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 05:13:57
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:13:50.033646 2026] [security2:error] [pid 8740:tid 8740] [client 162.158.103.35:12155] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:13:50.033646 2026] [security2:error] [pid 8740:tid 8740] [client 162.158.103.35:12155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinebrookdesign.com"] [uri "/.git/HEAD"] [unique_id "avfuDqSyFg01A0H8CGQ9KAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 04:46:13
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:46:07.955684 2026] [security2:error] [pid 6237:tid 6237] [client 162.158.103.35:12597] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:46:07.955684 2026] [security2:error] [pid 6237:tid 6237] [client 162.158.103.35:12597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.greensandbeans.us"] [uri "/.git/config"] [unique_id "avfnj4gRXi3ndO2J8ly8FAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:33:37
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:33:30.336398 2026] [security2:error] [pid 17075:tid 17075] [client 162.158.103.35:13704] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:33:30.336398 2026] [security2:error] [pid 17075:tid 17075] [client 162.158.103.35:13704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stringsonfire.com"] [uri "/.git/config"] [unique_id "avfWipfaQuwWvk2XKZu0jwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 02:33:37
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:33:33.943470 2026] [security2:error] [pid 7384:tid 7384] [client 162.158.103.35:10275] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:33:33.943470 2026] [security2:error] [pid 7384:tid 7384] [client 162.158.103.35:10275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.grieve.tv"] [uri "/.git/HEAD"] [unique_id "avfIfUSE5IsE8P4HeQjcAQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-13 14:10:55
UTC ·
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:30:30
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:30:23.584434 2026] [security2:error] [pid 26990:tid 26990] [client 162.158.103.35:13016] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:30:23.584434 2026] [security2:error] [pid 26990:tid 26990] [client 162.158.103.35:13016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omahops.org"] [uri "/.git/HEAD"] [unique_id "avbmvws7bC-Z3V9BgDH5XAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇺
conseilgouz
2026-11-12 16:27:47
UTC ·
(2 days ago)
are-17 : Block hidden directories=>/.git/config(/)
Hacking
🇺🇸
TPI-Abuse
2026-11-12 15:01:45
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:01:39.156187 2026] [security2:error] [pid 31483:tid 31483] [client 162.158.103.35:10737] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:01:39.156187 2026] [security2:error] [pid 31483:tid 31483] [client 162.158.103.35:10737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.stricklinphotography.com"] [uri "/.git/HEAD"] [unique_id "avXU0zT74vjI5jK1_v5yyAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 11:45:13
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:45:10.154045 2026] [security2:error] [pid 3891:tid 3891] [client 162.158.103.35:10825] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:45:10.154045 2026] [security2:error] [pid 3891:tid 3891] [client 162.158.103.35:10825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "midnightscribe.com"] [uri "/.git/HEAD"] [unique_id "avWmxs9j0J2fLOibeSxA-gAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:55:37
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:55:29.130628 2026] [security2:error] [pid 10671:tid 10671] [client 162.158.103.35:11512] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:55:29.130628 2026] [security2:error] [pid 10671:tid 10671] [client 162.158.103.35:11512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.adonamusic.com"] [uri "/.git/config"] [unique_id "avVi4SAm0DSo8kHeVG49AgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:37:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:37:28.922997 2026] [security2:error] [pid 26010:tid 26010] [client 162.158.103.35:13046] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:37:28.922997 2026] [security2:error] [pid 26010:tid 26010] [client 162.158.103.35:13046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.robertmcatee.com"] [uri "/.git/HEAD"] [unique_id "avVeqAbezR84nOhG8nHLagAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
