🇺🇸
TPI-Abuse
2026-11-12 14:58:31
UTC ·
(2 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:58:27.644056 2026] [security2:error] [pid 17199:tid 17199] [client 162.158.103.42:14006] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:58:27.644056 2026] [security2:error] [pid 17199:tid 17199] [client 162.158.103.42:14006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lazymanvegan.com"] [uri "/.git/config"] [unique_id "avXUE1euks3No4roBcKIawAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 12:47:38
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:47:31.661427 2026] [security2:error] [pid 1822:tid 1822] [client 162.158.103.42:13365] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:47:31.661427 2026] [security2:error] [pid 1822:tid 1822] [client 162.158.103.42:13365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oceansgift.com"] [uri "/.git/config"] [unique_id "avW1Y9KaBdv_qJKJavYFpQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 05:52:12
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:52:06.928355 2026] [security2:error] [pid 9088:tid 9088] [client 162.158.103.42:12827] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:52:06.928355 2026] [security2:error] [pid 9088:tid 9088] [client 162.158.103.42:12827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.daveskountrykatering.com"] [uri "/.git/config"] [unique_id "avVUBhUj8ApwpflYOFPjswAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-12 01:34:43
UTC ·
(13 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:57:17
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:57:13.381836 2026] [security2:error] [pid 25681:tid 25681] [client 162.158.103.42:10636] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:57:13.381836 2026] [security2:error] [pid 25681:tid 25681] [client 162.158.103.42:10636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkalleyproductions.com"] [uri "/.git/HEAD"] [unique_id "avTyybZWB8nO6o15ym2SMQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:18:30
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:18:22.954935 2026] [security2:error] [pid 12875:tid 12949] [client 162.158.103.42:9230] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:18:22.954935 2026] [security2:error] [pid 12875:tid 12949] [client 162.158.103.42:9230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.michaelmercier.com"] [uri "/.git/config"] [unique_id "avTbnpf3kDcvw1QRVBrsawAAAIk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:07:41
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:07:35.563276 2026] [security2:error] [pid 3607:tid 3607] [client 162.158.103.42:10976] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:07:35.563276 2026] [security2:error] [pid 3607:tid 3607] [client 162.158.103.42:10976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jwphotodesign.com"] [uri "/.git/HEAD"] [unique_id "avTLB3fwooPDRQKzAaEDwQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-11 05:44:34
UTC ·
(1 day ago)
GET /.git/HEAD (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
2026-11-11 05:08:12
UTC ·
(1 day ago)
apache vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 02:25:49
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:25:44.225051 2026] [security2:error] [pid 5030:tid 5030] [client 162.158.103.42:13439] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:25:44.225051 2026] [security2:error] [pid 5030:tid 5030] [client 162.158.103.42:13439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "se-advisorsgroup.com"] [uri "/.git/config"] [unique_id "avPSKCH3KptfkjpZJ-uljwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-11 00:13:30
UTC ·
(1 day ago)
Trying to access config files
Web App Attack
🇧🇪
voormedia
2026-11-10 16:19:23
UTC ·
(1 day ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇳🇱
Alt255
2026-11-10 06:03:58
UTC ·
(2 days ago)
[cb-01vi] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.42 - - [10/Nov/2026:07:03:55 +0100] "GET /.git/config HTTP/2.0" 301 343 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) ...
show more
[cb-01vi] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.42 - - [10/Nov/2026:07:03:55 +0100] "GET /.git/config HTTP/2.0" 301 343 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:24:01
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:23:56.143051 2026] [security2:error] [pid 2174:tid 2174] [client 162.158.103.42:11357] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:23:56.143051 2026] [security2:error] [pid 2174:tid 2174] [client 162.158.103.42:11357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.eandgenergy.com"] [uri "/.git/HEAD"] [unique_id "avKcXCJZQepuCgC6jan_dgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:35:14
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:35:07.847721 2026] [security2:error] [pid 12661:tid 12661] [client 162.158.103.42:10526] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:35:07.847721 2026] [security2:error] [pid 12661:tid 12661] [client 162.158.103.42:10526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.limobuswichita.com"] [uri "/.git/HEAD"] [unique_id "avKQ68t-BVguut4OuPYyhgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
