🇺🇸
TPI-Abuse
2026-11-11 20:53:12
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:53:09.263652 2026] [security2:error] [pid 20454:tid 20454] [client 162.158.172.138:9858 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:53:09.263652 2026] [security2:error] [pid 20454:tid 20454] [client 162.158.172.138:9858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ceta-arts.com"] [uri "/.git/config"] [unique_id "avTVteBm0mzTpZcReAC_3AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-11 20:06:09
UTC ·
(4 hours ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 19:47:58
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:47:53.079553 2026] [security2:error] [pid 12922:tid 12922] [client 162.158.172.138:1227 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:47:53.079553 2026] [security2:error] [pid 12922:tid 12922] [client 162.158.172.138:12277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "janeeyrecollection.com"] [uri "/.git/HEAD"] [unique_id "avTGacAi5r32ptvXc8DB4wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 08:40:48
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:40:41.516801 2026] [security2:error] [pid 5222:tid 5222] [client 162.158.172.138:12399] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:40:41.516801 2026] [security2:error] [pid 5222:tid 5222] [client 162.158.172.138:12399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "serviciosdeconstruccioncdmx.com.disenowebprofesional.com"] [uri "/.git/config"] [unique_id "avQqCSjkiux23YQ8hVmXBAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-11-11 06:03:38
UTC ·
(18 hours ago)
-:443 162.158.172.138 - - [11/Nov/2026:07:03:34 +0100] www.- "GET /.git/HEAD HTTP/2.0" 302 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
🇨🇭
GAS
2026-11-10 18:05:13
UTC ·
(1 day ago)
Bad Bot.
162.158.172.138 - - [10/Nov/2026:19:05:12 +0100] "GET /.git/config HTTP/2.0" 402 668 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "REDACTED" ""
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 10:19:41
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:19:33.670789 2026] [security2:error] [pid 3594731:tid 3594747] [client 162.158.172.138: ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:19:33.670789 2026] [security2:error] [pid 3594731:tid 3594747] [client 162.158.172.138:10725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seasonsgreeter.lightsondisplay.com"] [uri "/.git/config"] [unique_id "avLvtckSmn6NjH5UUhlZOwAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:34:41
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:34:36.956554 2026] [security2:error] [pid 11331:tid 11331] [client 162.158.172.138:1277 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:34:36.956554 2026] [security2:error] [pid 11331:tid 11331] [client 162.158.172.138:12773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deafinitely.com"] [uri "/.git/config"] [unique_id "avH2HPwaY81YaxhuiDw51AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:58:12
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:58:06.429028 2026] [security2:error] [pid 2685:tid 2685] [client 162.158.172.138:9305] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:58:06.429028 2026] [security2:error] [pid 2685:tid 2685] [client 162.158.172.138:9305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.girardonline.net"] [uri "/.git/config"] [unique_id "avHDXn2FcBj8N0Cjx7zvYgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:29:55
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:29:48.958682 2026] [security2:error] [pid 3918:tid 4091] [client 162.158.172.138:9409] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:29:48.958682 2026] [security2:error] [pid 3918:tid 4091] [client 162.158.172.138:9409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ainavelas.com"] [uri "/.git/config"] [unique_id "avGurJhLx_iXazH5vKIjVwAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:06:31
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:06:25.114751 2026] [security2:error] [pid 7176:tid 7176] [client 162.158.172.138:10305] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:06:25.114751 2026] [security2:error] [pid 7176:tid 7176] [client 162.158.172.138:10305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.enriquejezik.com"] [uri "/.git/HEAD"] [unique_id "avGNEVqv9kO0INM1KwfkHQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:03:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:03:43.078188 2026] [security2:error] [pid 9548:tid 9548] [client 162.158.172.138:10997] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:03:43.078188 2026] [security2:error] [pid 9548:tid 9548] [client 162.158.172.138:10997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appleconsultant.micahgartman.com"] [uri "/.git/HEAD"] [unique_id "avF-X_PpMOc-yoNlbYrTBQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:57:00
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:56:52.892506 2026] [security2:error] [pid 10433:tid 10433] [client 162.158.172.138:1315 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:56:52.892506 2026] [security2:error] [pid 10433:tid 10433] [client 162.158.172.138:13151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.circulodesonido.org"] [uri "/.git/HEAD"] [unique_id "avFutKehO_mjN6vreoGhXAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:30:55
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:30:51.521741 2026] [security2:error] [pid 3585:tid 3585] [client 162.158.172.138:14323] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:30:51.521741 2026] [security2:error] [pid 3585:tid 3585] [client 162.158.172.138:14323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.btsalesrep.com"] [uri "/.git/HEAD"] [unique_id "avE-a2vHPIERsUIOql0VfQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-09 01:30:43
UTC ·
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
