🇺🇸
TPI-Abuse
2026-11-10 00:23:23
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:23:17.662710 2026] [security2:error] [pid 12723:tid 12789] [client 162.158.172.139:1302 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:23:17.662710 2026] [security2:error] [pid 12723:tid 12789] [client 162.158.172.139:13022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cwpianolessons.com"] [uri "/.git/config"] [unique_id "avJj9YVVw3KsJFhPs9tJGAAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:50:03
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:49:58.744447 2026] [security2:error] [pid 27862:tid 27862] [client 162.158.172.139:1260 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:49:58.744447 2026] [security2:error] [pid 27862:tid 27862] [client 162.158.172.139:12602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jonathanwilson.me"] [uri "/.git/config"] [unique_id "avHrpo98nxEU5oJNE7Q6bgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:02:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:02:35.282229 2026] [security2:error] [pid 30026:tid 30026] [client 162.158.172.139:1192 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:02:35.282229 2026] [security2:error] [pid 30026:tid 30026] [client 162.158.172.139:11921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.michaelpmcgrath.com"] [uri "/.git/HEAD"] [unique_id "avG2W8VAwy2cLkNekpyk6QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:22:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:22:31.215199 2026] [security2:error] [pid 15164:tid 15164] [client 162.158.172.139:1419 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:22:31.215199 2026] [security2:error] [pid 15164:tid 15164] [client 162.158.172.139:14191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tradelosangeles.com"] [uri "/.git/HEAD"] [unique_id "avGe514Yxk4TAPYSzzAYJAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mail.avx.gr
2026-11-09 10:00:32
UTC ·
(1 day ago)
plesk-rapid-ban sensitive-file-probe host=hellasdirect.paladin.gr
Hacking
🇺🇸
TPI-Abuse
2026-11-09 02:50:09
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:50:03.947687 2026] [security2:error] [pid 16987:tid 16987] [client 162.158.172.139:1151 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:50:03.947687 2026] [security2:error] [pid 16987:tid 16987] [client 162.158.172.139:11517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alitcogroup.com"] [uri "/.git/config"] [unique_id "avE02031u9t63z2nTtUZSAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 13:08:30
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:08:26.542018 2026] [security2:error] [pid 8296:tid 8296] [client 162.158.172.139:13347] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:08:26.542018 2026] [security2:error] [pid 8296:tid 8296] [client 162.158.172.139:13347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.haywardcarpentry.com"] [uri "/.git/HEAD"] [unique_id "avB0SvrR-PC7yU8UHA5GmwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-08 11:03:27
UTC ·
(2 days ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇬🇧
ByteGuard Security Systems
2026-11-08 08:00:41
UTC ·
(2 days ago)
Automated scanner matched our decoy-secret-scan filter (1 request(s) starting 08/Nov/2026:11:00:41 +0300 MSK, UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36). Sample paths: GET /.gi ...
show more
Automated scanner matched our decoy-secret-scan filter (1 request(s) starting 08/Nov/2026:11:00:41 +0300 MSK, UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36). Sample paths: GET /.git/HEAD. All requests returned 404/405 on a decoy host with no such resources.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:12:22
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:12:18.114388 2026] [security2:error] [pid 22780:tid 22780] [client 162.158.172.139:1241 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:12:18.114388 2026] [security2:error] [pid 22780:tid 22780] [client 162.158.172.139:12418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "recetabook.com"] [uri "/.git/HEAD"] [unique_id "au_agrflwlkS5SW880z8JgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 23:03:06
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:02:59.382618 2026] [security2:error] [pid 32171:tid 32171] [client 162.158.172.139:1118 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:02:59.382618 2026] [security2:error] [pid 32171:tid 32171] [client 162.158.172.139:11181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thainotarycalifornia.com"] [uri "/.git/HEAD"] [unique_id "au-uI8H39kQ3SIB3C66UGwAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:16:03
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:15:57.938331 2026] [security2:error] [pid 32396:tid 32396] [client 162.158.172.139:1320 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:15:57.938331 2026] [security2:error] [pid 32396:tid 32396] [client 162.158.172.139:13206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lyldevelopers.com"] [uri "/.git/HEAD"] [unique_id "au-jHXDSTGkxgEz3fcHCxAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 23:27:18
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:27:14.469724 2026] [security2:error] [pid 3684327:tid 3684351] [client 162.158.172.139: ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:27:14.469724 2026] [security2:error] [pid 3684327:tid 3684351] [client 162.158.172.139:10621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aapm.info.aafm.us"] [uri "/.git/config"] [unique_id "auu_UjXYdww3Nl0k8SIQaAAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-11-04 19:15:28
UTC ·
(5 days ago)
162.158.172.139 - - [04/Nov/2026:20:15:26 +0100] "GET /.git/config HTTP/2.0" 404 275 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 15:35:57
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:35:49.062643 2026] [security2:error] [pid 3118:tid 3118] [client 162.158.172.139:0] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:35:49.062643 2026] [security2:error] [pid 3118:tid 3118] [client 162.158.172.139:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.webuildbeaches.com"] [uri "/.env"] [unique_id "autQ1TbDK20GThrhLqA3YAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
