🇺🇸
TPI-Abuse
2026-11-10 08:18:28
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:18:23.027610 2026] [security2:error] [pid 13349:tid 13349] [client 162.158.172.150:1088 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:18:23.027610 2026] [security2:error] [pid 13349:tid 13349] [client 162.158.172.150:10886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knuf.fritsknuf.com"] [uri "/.git/config"] [unique_id "avLTT7ZutKq7hj2YZLCy5QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-11-10 06:14:33
UTC ·
(3 hours ago)
2 attacks on VC URLs:
GET /.git/HEAD HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-11-10 03:49:27
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:49:23.662788 2026] [security2:error] [pid 6758:tid 6758] [client 162.158.172.150:13175] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:49:23.662788 2026] [security2:error] [pid 6758:tid 6758] [client 162.158.172.150:13175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "app.handyrehab.com"] [uri "/.git/config"] [unique_id "avKUQ-KFEiiSmkG0SOZnigAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:11:19
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:11:15.822199 2026] [security2:error] [pid 1939:tid 1939] [client 162.158.172.150:12591] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:11:15.822199 2026] [security2:error] [pid 1939:tid 1939] [client 162.158.172.150:12591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "illumoonatedtarot.com"] [uri "/.git/HEAD"] [unique_id "avKLU8DIzyVl-TBcBfVYlAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:19:29
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:19:22.514350 2026] [security2:error] [pid 30565:tid 30565] [client 162.158.172.150:1182 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:19:22.514350 2026] [security2:error] [pid 30565:tid 30565] [client 162.158.172.150:11822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cassialifesci.com"] [uri "/.git/config"] [unique_id "avJ_KsPz4sJVsWoGBfSLiwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:54:25
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:54:19.882463 2026] [security2:error] [pid 31917:tid 31917] [client 162.158.172.150:9965 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:54:19.882463 2026] [security2:error] [pid 31917:tid 31917] [client 162.158.172.150:9965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.grdigitaldesigns.com"] [uri "/.git/config"] [unique_id "avJrO7V-XTmN6a0-stIj2AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 20:34:02
UTC ·
(13 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
mishan
2026-11-09 16:59:37
UTC ·
(17 hours ago)
162.158.172.150 - - [09/Nov/2026:08:59:36 -0800] "GET /.git/HEAD HTTP/1.1" 200 1042069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:31:30
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:31:26.810524 2026] [security2:error] [pid 29172:tid 29172] [client 162.158.172.150:1271 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:31:26.810524 2026] [security2:error] [pid 29172:tid 29172] [client 162.158.172.150:12718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thehudsonpress.com"] [uri "/.git/HEAD"] [unique_id "avHnTuDD4Rwmz19b3m55oQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:14:52
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:14:45.932022 2026] [security2:error] [pid 10736:tid 10736] [client 162.158.172.150:9749 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:14:45.932022 2026] [security2:error] [pid 10736:tid 10736] [client 162.158.172.150:9749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.clinchspurs.com"] [uri "/.git/config"] [unique_id "avHjZZ-i7zmlKn85fxWkGgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:41:24
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:41:18.414634 2026] [security2:error] [pid 7124:tid 7124] [client 162.158.172.150:11430] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:41:18.414634 2026] [security2:error] [pid 7124:tid 7124] [client 162.158.172.150:11430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mindheartbreath.com"] [uri "/.git/config"] [unique_id "avHbjlLVT8VdRntfEhyImgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:20:03
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:19:56.265830 2026] [security2:error] [pid 3925:tid 3982] [client 162.158.172.150:11943] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:19:56.265830 2026] [security2:error] [pid 3925:tid 3982] [client 162.158.172.150:11943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.thatspecial.com"] [uri "/.git/config"] [unique_id "avHWjM1ZbZ67TPGJUDGPFgAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:42:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:42:01.996148 2026] [security2:error] [pid 8011:tid 8011] [client 162.158.172.150:12315] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:42:01.996148 2026] [security2:error] [pid 8011:tid 8011] [client 162.158.172.150:12315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdsparts.com"] [uri "/.git/HEAD"] [unique_id "avF5SbiJLu7279-s_SbV0gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-09 02:41:35
UTC ·
(1 day ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.150 - - [09/Nov/2026:03:41:16 +0100] "GET /.git/HEAD HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.150 - - [09/Nov/2026:03:41:16 +0100] "GET /.git/HEAD HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:49:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:49:18.981919 2026] [security2:error] [pid 30407:tid 30407] [client 162.158.172.150:1166 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:49:18.981919 2026] [security2:error] [pid 30407:tid 30407] [client 162.158.172.150:11668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cygnetsilks.com"] [uri "/.git/config"] [unique_id "avEYjuq2Pztkf2sMARdlsgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
