🇧🇪
voormedia
2026-11-12 20:46:23
UTC ·
(1 hour ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:24:52
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:24:42.061278 2026] [security2:error] [pid 11177:tid 11177] [client 162.158.172.135:1186 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:24:42.061278 2026] [security2:error] [pid 11177:tid 11177] [client 162.158.172.135:11864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whitesquirrelholdings.hal.dance"] [uri "/.git/HEAD"] [unique_id "avYEamjyl5zA1vkQEIlpRgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:46:22
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:46:15.531285 2026] [security2:error] [pid 31703:tid 31703] [client 162.158.172.135:1350 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:46:15.531285 2026] [security2:error] [pid 31703:tid 31703] [client 162.158.172.135:13507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.walterceron.com"] [uri "/.git/config"] [unique_id "avVgt-jK8pfoy0ey5rVBqQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:28:24
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:28:17.943038 2026] [security2:error] [pid 1614:tid 1614] [client 162.158.172.135:13809] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:28:17.943038 2026] [security2:error] [pid 1614:tid 1614] [client 162.158.172.135:13809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.title30.com"] [uri "/.git/HEAD"] [unique_id "avVcgV2H9ufYgZJ1WbiidQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 05:58:32
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:58:24.670155 2026] [security2:error] [pid 16482:tid 16590] [client 162.158.172.135:9796 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:58:24.670155 2026] [security2:error] [pid 16482:tid 16590] [client 162.158.172.135:9796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "api.neotienda.com"] [uri "/.git/config"] [unique_id "avVVgGEdzFtZfe2JQo4LeQAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 04:05:45
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:05:40.430209 2026] [security2:error] [pid 10492:tid 10492] [client 162.158.172.135:1045 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:05:40.430209 2026] [security2:error] [pid 10492:tid 10492] [client 162.158.172.135:10459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.interforce.com"] [uri "/.git/HEAD"] [unique_id "avU7FBPuO4DftIMtXwjC1gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
securejdprop
2026-11-12 00:18:19
UTC ·
(21 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.
Hacking
🇺🇸
TPI-Abuse
2026-11-11 20:59:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:59:52.026984 2026] [security2:error] [pid 20785:tid 20785] [client 162.158.172.135:1070 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:59:52.026984 2026] [security2:error] [pid 20785:tid 20785] [client 162.158.172.135:10709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.michaelsabbey.com"] [uri "/.git/config"] [unique_id "avTXSGLQM0dgf6ejHRKqewAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:09:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:09:02.557280 2026] [security2:error] [pid 30579:tid 30579] [client 162.158.172.135:1050 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:09:02.557280 2026] [security2:error] [pid 30579:tid 30579] [client 162.158.172.135:10502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.imaginationbyme.com"] [uri "/.git/HEAD"] [unique_id "avKY3k2_liqzOtUXC3yswAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:39:33
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:39:30.715214 2026] [security2:error] [pid 12723:tid 12795] [client 162.158.172.135:1227 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:39:30.715214 2026] [security2:error] [pid 12723:tid 12795] [client 162.158.172.135:12277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.yubasutterphotographer.com"] [uri "/.git/config"] [unique_id "avKR8oVVw3KsJFhPs9tTowAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
securejdprop
2026-11-10 02:08:20
UTC ·
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.
Hacking
🇺🇸
TPI-Abuse
2026-11-10 02:04:13
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:04:06.302383 2026] [security2:error] [pid 20444:tid 20444] [client 162.158.172.135:1293 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:04:06.302383 2026] [security2:error] [pid 20444:tid 20444] [client 162.158.172.135:12934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dancingmountainsbrewing.com"] [uri "/.git/HEAD"] [unique_id "avJ7lqZmA89bV2aEygHrGgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 17:17:45
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:17:38.161045 2026] [security2:error] [pid 1533338:tid 1533390] [client 162.158.172.135: ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:17:38.161045 2026] [security2:error] [pid 1533338:tid 1533390] [client 162.158.172.135:11063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cornell61.org"] [uri "/.git/HEAD"] [unique_id "avIAMppewzrj7pnVoV2A6gAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:48:39
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:48:31.859085 2026] [security2:error] [pid 25197:tid 25197] [client 162.158.172.135:1126 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:48:31.859085 2026] [security2:error] [pid 25197:tid 25197] [client 162.158.172.135:11261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.4ehardware.4ehardware.com"] [uri "/.git/config"] [unique_id "avHrT697TejhVzXgsNnmZAAAADw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:26:52
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:26:47.693709 2026] [security2:error] [pid 25766:tid 25766] [client 162.158.172.135:1072 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:26:47.693709 2026] [security2:error] [pid 25766:tid 25766] [client 162.158.172.135:10728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billiardlifetapleague.com"] [uri "/.git/config"] [unique_id "avHmN-5pvDklUmBjyOZlUAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack