🇺🇸
TPI-Abuse
2026-11-13 10:27:35
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:27:28.407225 2026] [security2:error] [pid 23235:tid 23235] [client 162.158.172.152:1147 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:27:28.407225 2026] [security2:error] [pid 23235:tid 23235] [client 162.158.172.152:11475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hazardrecords.org"] [uri "/.git/config"] [unique_id "avbmENyZH1z3_9ssqS9-TwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
cg-design.co.uk
2026-11-13 09:44:26
UTC ·
(12 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 162.158.172.152 (PL/Poland/-)
SQL Injection
🇨🇭
TheCoon
2026-11-13 07:07:14
UTC ·
(14 hours ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-12 17:42:52
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:42:48.900867 2026] [security2:error] [pid 28891:tid 28891] [client 162.158.172.152:1416 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:42:48.900867 2026] [security2:error] [pid 28891:tid 28891] [client 162.158.172.152:14169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jiveturkeyband.com"] [uri "/.git/config"] [unique_id "avX6mINlQ0IldyUMVJmKeAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:38:36
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:38:27.557573 2026] [security2:error] [pid 12284:tid 12284] [client 162.158.172.152:1097 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:38:27.557573 2026] [security2:error] [pid 12284:tid 12284] [client 162.158.172.152:10975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.panesarlaw.com"] [uri "/.git/config"] [unique_id "avXdc45v9mugHjp-5Vo6jAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-12 14:32:39
UTC ·
(1 day ago)
GET /.git/HEAD (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 14:07:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:07:31.332238 2026] [security2:error] [pid 19938:tid 19938] [client 162.158.172.152:1073 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 09:07:31.332238 2026] [security2:error] [pid 19938:tid 19938] [client 162.158.172.152:10734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fairfieldfarms.net"] [uri "/.git/config"] [unique_id "avXII8REPDjdjWs7sdCm8wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 09:57:10
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 04:57:05.472186 2026] [security2:error] [pid 1319:tid 1319] [client 162.158.172.152:9813] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 04:57:05.472186 2026] [security2:error] [pid 1319:tid 1319] [client 162.158.172.152:9813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hills-tax.com"] [uri "/.git/HEAD"] [unique_id "avWNcVI9E0PKU-u7AsQkQwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
craudiovizai
2026-11-12 06:30:43
UTC ·
(1 day ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/HEAD. Blocked at the edge.
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-12 06:18:29
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:18:23.743195 2026] [security2:error] [pid 5547:tid 5547] [client 162.158.172.152:12067] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:18:23.743195 2026] [security2:error] [pid 5547:tid 5547] [client 162.158.172.152:12067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.dcsteven.com"] [uri "/.git/config"] [unique_id "avVaLwgbwy-ErOIs-bW-vQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 04:39:39
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:39:32.103406 2026] [security2:error] [pid 27885:tid 27885] [client 162.158.172.152:1148 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:39:32.103406 2026] [security2:error] [pid 27885:tid 27885] [client 162.158.172.152:11486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ballantinedrywall.com"] [uri "/.git/HEAD"] [unique_id "avVDBBli2aSuVo1JOjAtDwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 03:55:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:55:28.585457 2026] [security2:error] [pid 31220:tid 31223] [client 162.158.172.152:1333 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:55:28.585457 2026] [security2:error] [pid 31220:tid 31223] [client 162.158.172.152:13333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.idealcentralvac.com"] [uri "/.git/HEAD"] [unique_id "avU4sE7QmfqxbyaBzT2KZgAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hary74656
2026-11-11 23:29:03
UTC ·
(1 day ago)
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 162.158.172.152] [realclient 162.158.172.152] [12/Nov/2026:00:29:03 +0100] [vhost fehlende.info] 403 "GET /.git/HEAD HTTP/2.0"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:47:48
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:47:45.327511 2026] [security2:error] [pid 19075:tid 19075] [client 162.158.172.152:1097 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:47:45.327511 2026] [security2:error] [pid 19075:tid 19075] [client 162.158.172.152:10976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seimadrid.magodarman.com"] [uri "/.git/config"] [unique_id "avTigRRQmCU4FqcAcfh3QgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:14:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:14:44.024748 2026] [security2:error] [pid 1662:tid 1662] [client 162.158.172.152:9966] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:14:44.024748 2026] [security2:error] [pid 1662:tid 1662] [client 162.158.172.152:9966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ageh.com"] [uri "/.git/config/"] [unique_id "avTaxPKPvoTb3CvmPpdqIQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
