🇺🇸
TPI-Abuse
2026-11-14 11:43:26
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:43:22.603517 2026] [security2:error] [pid 28066:tid 28066] [client 162.158.172.15:9724] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:43:22.603517 2026] [security2:error] [pid 28066:tid 28066] [client 162.158.172.15:9724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "piperwaite.com.bonefrog.com"] [uri "/.git/config"] [unique_id "avhJWjx6Pi-AciMtfzQGGgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 06:27:25
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:27:21.570888 2026] [security2:error] [pid 7779:tid 7801] [client 162.158.172.15:10266] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:27:21.570888 2026] [security2:error] [pid 7779:tid 7801] [client 162.158.172.15:10266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "philacentric.com"] [uri "/.git/HEAD"] [unique_id "avf_SYgEj7tBnPOa-sI2XgAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-13 21:28:34
UTC ·
(17 hours ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.15 - - [13/Nov/2026:22:28:17 +0100] "GET /.git/HEAD HTTP/2.0" 200 5287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.15 - - [13/Nov/2026:22:28:17 +0100] "GET /.git/HEAD HTTP/2.0" 200 5287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-13 14:26:12
UTC ·
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:55:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:55:17.637226 2026] [security2:error] [pid 8065:tid 8065] [client 162.158.172.15:10347] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:55:17.637226 2026] [security2:error] [pid 8065:tid 8065] [client 162.158.172.15:10347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tijuanabible.org"] [uri "/.git/HEAD"] [unique_id "avbslfOI9JRSoF91EeyFkgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:40:26
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:40:19.113847 2026] [security2:error] [pid 26161:tid 26161] [client 162.158.172.15:10009] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:40:19.113847 2026] [security2:error] [pid 26161:tid 26161] [client 162.158.172.15:10009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whiterhinogroup.net"] [uri "/.git/HEAD"] [unique_id "avbbA42XKHmqjhqpaR0_0AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-11-12 19:44:48
UTC ·
(1 day ago)
162.158.172.15 - - [12/Nov/2026:20:44:46 +0100] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-11-12 17:37:45
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:51:12
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:51:04.518755 2026] [security2:error] [pid 29652:tid 29652] [client 162.158.172.15:11304] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:51:04.518755 2026] [security2:error] [pid 29652:tid 29652] [client 162.158.172.15:11304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wilburmanagementgroup.com"] [uri "/.git/config"] [unique_id "avXgaI7hfTImh94DmdS90AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:26:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:26:35.366883 2026] [security2:error] [pid 29289:tid 29289] [client 162.158.172.15:11017] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:26:35.366883 2026] [security2:error] [pid 29289:tid 29289] [client 162.158.172.15:11017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.meridianranchdrc.org"] [uri "/.git/HEAD"] [unique_id "avXaq1Q5VNyi8Sc0ERaENAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 14:45:14
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:45:09.297397 2026] [security2:error] [pid 16334:tid 16334] [client 162.158.172.15:12243] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:45:09.297397 2026] [security2:error] [pid 16334:tid 16334] [client 162.158.172.15:12243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.district7vote.com"] [uri "/.git/config"] [unique_id "avXQ9Szpf7nex2Pr-XA-QwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 14:23:27
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:23:23.002596 2026] [security2:error] [pid 23932:tid 23932] [client 162.158.172.15:11901] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:23:23.002596 2026] [security2:error] [pid 23932:tid 23932] [client 162.158.172.15:11901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rcjav.com"] [uri "/.git/HEAD"] [unique_id "avXL22J1yclIWMXew-MggQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 08:22:19
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:22:13.500658 2026] [security2:error] [pid 9321:tid 9321] [client 162.158.172.15:11737] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:22:13.500658 2026] [security2:error] [pid 9321:tid 9321] [client 162.158.172.15:11737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.informationdocuments.com"] [uri "/.git/HEAD"] [unique_id "avV3NS7spi7ETkVHzn9jTwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:21:46
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:21:43.201177 2026] [security2:error] [pid 17601:tid 17698] [client 162.158.172.15:12547] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:21:43.201177 2026] [security2:error] [pid 17601:tid 17698] [client 162.158.172.15:12547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.adprosfla.com"] [uri "/.git/config"] [unique_id "avVa97neE-cnW2zWvCQrTwAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 05:41:30
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:41:21.672439 2026] [security2:error] [pid 22583:tid 22583] [client 162.158.172.15:12312] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:41:21.672439 2026] [security2:error] [pid 22583:tid 22583] [client 162.158.172.15:12312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.supaskills.com"] [uri "/.git/config"] [unique_id "avVRgUTbWuUwCtDjALAq0wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
