🇫🇷
pm33
2026-11-10 19:11:23
UTC ·
(15 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:30:32
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:30:26.496993 2026] [security2:error] [pid 5020:tid 5020] [client 162.158.172.224:9564] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:30:26.496993 2026] [security2:error] [pid 5020:tid 5020] [client 162.158.172.224:9564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clients.kinareemagazine.com"] [uri "/.git/config"] [unique_id "avLIEuLOpLIvJgg_aArD5gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:53:44
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:53:38.981680 2026] [security2:error] [pid 27055:tid 27055] [client 162.158.172.224:1129 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:53:38.981680 2026] [security2:error] [pid 27055:tid 27055] [client 162.158.172.224:11290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vintageamptubes.ink2wear.com"] [uri "/.git/HEAD"] [unique_id "avHsgh7Y0HEe490yN5gLHAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-09 15:45:21
UTC ·
(1 day ago)
Scanning for exposed credentials and private keys.
Hacking
🇺🇸
TPI-Abuse
2026-11-09 09:41:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:40:59.226415 2026] [security2:error] [pid 21633:tid 21633] [client 162.158.172.224:9807 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:40:59.226415 2026] [security2:error] [pid 21633:tid 21633] [client 162.158.172.224:9807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.johnprimerano.com"] [uri "/.git/HEAD"] [unique_id "avGVK54DwzFXNEY5m_LbZwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-09 08:01:30
UTC ·
(2 days ago)
[09/Nov/2026:10:01:30 +0200] -- 162.158.172.224 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
Bad Web Bot
Web App Attack
🇯🇵
beon
2026-11-08 23:18:04
UTC ·
(2 days ago)
[DateTime=>2026-11-08T23:18:04Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/.git/HEAD] , [total_Hit=>once]
Bad Web Bot
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-08 10:23:42
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:23:35.886963 2026] [security2:error] [pid 20418:tid 20418] [client 162.158.172.224:1283 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:23:35.886963 2026] [security2:error] [pid 20418:tid 20418] [client 162.158.172.224:12837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.disneyweddinginvitations.com"] [uri "/.git/HEAD"] [unique_id "avBNp76V5AbedrxS3KuxAQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:41:42
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:41:34.420405 2026] [security2:error] [pid 21523:tid 21523] [client 162.158.172.224:1383 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:41:34.420405 2026] [security2:error] [pid 21523:tid 21523] [client 162.158.172.224:13838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "discountphotogifts.com"] [uri "/.git/HEAD"] [unique_id "au_vbgGXR_TQ4-B5ke3AnwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:11:46
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:11:41.215428 2026] [security2:error] [pid 32764:tid 32764] [client 162.158.172.224:1075 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:11:41.215428 2026] [security2:error] [pid 32764:tid 32764] [client 162.158.172.224:10756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kendylcelina.com"] [uri "/.git/config"] [unique_id "au_obbawYB-0hn8ZTquuhwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 17:22:02
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:21:56.500520 2026] [security2:error] [pid 32373:tid 32373] [client 162.158.172.224:9498 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:21:56.500520 2026] [security2:error] [pid 32373:tid 32373] [client 162.158.172.224:9498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jeffmitchell.info"] [uri "/.git/HEAD"] [unique_id "autptGOAjct4GfuxMcly-gAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
copestack
2026-11-04 02:30:07
UTC ·
(1 week ago)
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
Web App Attack
🇫🇷
pm33
2026-11-03 17:23:05
UTC ·
(1 week ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇬🇧
foxxelabs
2026-11-03 12:29:29
UTC ·
(1 week ago)
Automated report from FoxxeLabs Sentinel. Path probed: /.git/HEAD | Project: taca | Reason(s): Known exploit path: /.git/HEAD | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 04:28:15
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 00:28:08.259285 2026] [security2:error] [pid 2994:tid 2994] [client 162.158.172.224:11900] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 00:28:08.259285 2026] [security2:error] [pid 2994:tid 2994] [client 162.158.172.224:11900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nowell.net"] [uri "/.git/HEAD"] [unique_id "at2FWAlBPVeD9xxmGclElQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack