🇺🇸
TPI-Abuse
2026-11-12 19:23:42
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:23:36.947403 2026] [security2:error] [pid 6689:tid 6689] [client 162.158.103.38:12131] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:23:36.947403 2026] [security2:error] [pid 6689:tid 6689] [client 162.158.103.38:12131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jeffmitchell.info"] [uri "/.git/HEAD"] [unique_id "avYSODoaYUuhpMsYsBhdwwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:18:47
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:18:41.739340 2026] [security2:error] [pid 21716:tid 21716] [client 162.158.103.38:13617] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:18:41.739340 2026] [security2:error] [pid 21716:tid 21716] [client 162.158.103.38:13617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lumentravel.com"] [uri "/.git/HEAD"] [unique_id "avYDAVWZ7OYjtKCqp5RCpAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-12 17:56:49
UTC ·
(3 hours ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 16:28:00
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:27:53.390224 2026] [security2:error] [pid 30966:tid 30966] [client 162.158.103.38:13999] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:27:53.390224 2026] [security2:error] [pid 30966:tid 30966] [client 162.158.103.38:13999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adcommdigitel.cathrynn.com"] [uri "/.git/HEAD"] [unique_id "avXpCZfRBegQsG-EcerjHgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:21:27
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:21:22.330381 2026] [security2:error] [pid 24862:tid 24862] [client 162.158.103.38:10882] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:21:22.330381 2026] [security2:error] [pid 24862:tid 24862] [client 162.158.103.38:10882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.judgehall.com"] [uri "/.git/HEAD"] [unique_id "avXZcssln3LlJ2ieDaPAvwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:26:12
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:26:07.866753 2026] [security2:error] [pid 29420:tid 29420] [client 162.158.103.38:12605] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:26:07.866753 2026] [security2:error] [pid 29420:tid 29420] [client 162.158.103.38:12605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ktnwassociatesinc.com"] [uri "/.git/config"] [unique_id "avTdb4iwUFypgomPZ2jzpQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇻🇳
cimee
2026-11-11 06:59:47
UTC ·
(1 day ago)
This IP accessed the path /.env, which is banned.
Bad Web Bot
Web App Attack
🇨🇭
Viks
2026-11-10 17:06:13
UTC ·
(2 days ago)
HTTP vulnerability scanning:
GET /.git/HEAD -> 403
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:50:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:50:41.332155 2026] [security2:error] [pid 2681:tid 2681] [client 162.158.103.38:12113] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:50:41.332155 2026] [security2:error] [pid 2681:tid 2681] [client 162.158.103.38:12113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thespotfurniture.trademartghana.com"] [uri "/.git/config"] [unique_id "avLM0T1I_oapfTgELL8fTAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mxbl
2026-11-09 23:35:03
UTC ·
(2 days ago)
Scanning for CMS vulnerabilities on a non-CMS system: /.git/HEAD
Web App Attack
🇩🇪
ghostwarriors
2026-11-09 17:20:13
UTC ·
(3 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-11-09 16:55:38
UTC ·
(3 days ago)
2026/11/09 17:55:37 [error] 35899#101794: *3373256 access forbidden by rule, client: 162.158.103.38, server: revolutionbim.com, request: "GET /.git/HEAD HTTP/2.0", host: "revolutionbim.com"
...
Web Spam
🇺🇸
TPI-Abuse
2026-11-09 14:13:51
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:13:44.324663 2026] [security2:error] [pid 3505:tid 3505] [client 162.158.103.38:14252] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:13:44.324663 2026] [security2:error] [pid 3505:tid 3505] [client 162.158.103.38:14252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jennifergiesler.com"] [uri "/.git/config"] [unique_id "avHVGF9c95iDgV7tjIvU5QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:01:14
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:01:08.865526 2026] [security2:error] [pid 13547:tid 13547] [client 162.158.103.38:12651] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:01:08.865526 2026] [security2:error] [pid 13547:tid 13547] [client 162.158.103.38:12651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juncurryahn.com"] [uri "/.git/HEAD"] [unique_id "avGZ5I342aiUp4OEQjBV4gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:45:25
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:45:19.615380 2026] [security2:error] [pid 2825:tid 2849] [client 162.158.103.38:10701] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:45:19.615380 2026] [security2:error] [pid 2825:tid 2849] [client 162.158.103.38:10701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.miltonthepuppy.com"] [uri "/.git/config"] [unique_id "avGWLyVmbqCFX_9wayMBlQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack