🇺🇸
TPI-Abuse
2026-11-11 21:21:29
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:21:23.430653 2026] [security2:error] [pid 9845:tid 9845] [client 162.158.172.146:12938] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:21:23.430653 2026] [security2:error] [pid 9845:tid 9845] [client 162.158.172.146:12938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rejuvenationsystems.com"] [uri "/.git/config"] [unique_id "avTcU9Wg7lQCMBgzyIbPEgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 19:29:52
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:29:47.398380 2026] [security2:error] [pid 8092:tid 8092] [client 162.158.172.146:10323] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:29:47.398380 2026] [security2:error] [pid 8092:tid 8092] [client 162.158.172.146:10323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeremyurbanski.com"] [uri "/.git/config"] [unique_id "avTCKzrkTAvdvaBgXsKWwwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-11 06:16:20
UTC ·
(19 hours ago)
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-11 00:38:42
UTC ·
(1 day ago)
[11/Nov/2026:02:38:41 +0200] -- 162.158.172.146 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
Anonymous
2026-11-10 15:33:31
UTC ·
(1 day ago)
GET /.git/HEAD HTTP/1.1
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 09:16:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:16:11.114987 2026] [security2:error] [pid 9904:tid 9904] [client 162.158.172.146:11645] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:16:11.114987 2026] [security2:error] [pid 9904:tid 9904] [client 162.158.172.146:11645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bank.gisur.com"] [uri "/.git/config"] [unique_id "avLg233q_FUVBL7mlH0S2AAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:49:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:49:15.750063 2026] [security2:error] [pid 1539:tid 1539] [client 162.158.172.146:12613] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:49:15.750063 2026] [security2:error] [pid 1539:tid 1539] [client 162.158.172.146:12613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ehrlichfamily.net.ehrlichmedia.com"] [uri "/.git/HEAD"] [unique_id "avLaiywIwc_6M9x0wZgB7AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:35:07
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:34:58.969983 2026] [security2:error] [pid 6529:tid 6529] [client 162.158.172.146:10903] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:34:58.969983 2026] [security2:error] [pid 6529:tid 6529] [client 162.158.172.146:10903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.guardmagic.eu"] [uri "/.git/config"] [unique_id "avKtAr25qntOwAOJ8DByewAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:23:38
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:23:34.206826 2026] [security2:error] [pid 26451:tid 26467] [client 162.158.172.146:1263 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:23:34.206826 2026] [security2:error] [pid 26451:tid 26467] [client 162.158.172.146:12633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digital4z.com"] [uri "/.git/config"] [unique_id "avKAJiMSmgT6Saoyq9Xa-QAAAI4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:55:28
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:55:23.286410 2026] [security2:error] [pid 29364:tid 29364] [client 162.158.172.146:1133 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:55:23.286410 2026] [security2:error] [pid 29364:tid 29364] [client 162.158.172.146:11335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.tcmu.org"] [uri "/.git/HEAD"] [unique_id "avH6-5ImXi9P2PhRANAHRQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:40:19
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:40:15.200481 2026] [security2:error] [pid 22761:tid 22761] [client 162.158.172.146:9897 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:40:15.200481 2026] [security2:error] [pid 22761:tid 22761] [client 162.158.172.146:9897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metalgecko.com"] [uri "/.git/config"] [unique_id "avG_LxEHyTGAE4zQlx_YswAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:22:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:22:04.059766 2026] [security2:error] [pid 25263:tid 25263] [client 162.158.172.146:1402 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:22:04.059766 2026] [security2:error] [pid 25263:tid 25263] [client 162.158.172.146:14020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dannyvanryswyk.dannyvanrijswijk.com"] [uri "/.git/HEAD"] [unique_id "avGs3O5PZB04zbnkVCwAcgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:41:09
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:41:04.319456 2026] [security2:error] [pid 26539:tid 26539] [client 162.158.172.146:1338 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:41:04.319456 2026] [security2:error] [pid 26539:tid 26539] [client 162.158.172.146:13382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cookwithjohnnyb.com.burlison.com"] [uri "/.git/config"] [unique_id "avGHIJlgUiBOX7mLhvb4xAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-09 06:33:42
UTC ·
(2 days ago)
Scanning for exposed credentials and private keys.
Hacking
🇬🇧
openstrike.co.uk
2026-11-09 06:15:08
UTC ·
(2 days ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking