🇺🇸
TPI-Abuse
2026-11-08 11:11:43
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:11:36.432888 2026] [security2:error] [pid 1453:tid 1453] [client 162.158.172.58:10356] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:11:36.432888 2026] [security2:error] [pid 1453:tid 1453] [client 162.158.172.58:10356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.personalizedbabyshowernapkins.com"] [uri "/.git/config"] [unique_id "avBY6B3OA1ZhT0XzFFD4pAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 07:51:27
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 02:51:23.547120 2026] [security2:error] [pid 23976:tid 24014] [client 162.158.172.58:13069] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 02:51:23.547120 2026] [security2:error] [pid 23976:tid 24014] [client 162.158.172.58:13069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rilap.us"] [uri "/.git/HEAD"] [unique_id "avAp-1rGinaENAlx16TMowAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-08 07:39:15
UTC ·
(7 hours ago)
[08/Nov/2026:09:39:15 +0200] -- 162.158.172.58 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-08 07:05:26
UTC ·
(7 hours ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.58 - - [08/Nov/2026:08:05:12 +0100] "GET /.git/config HTTP/2.0" 301 472 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.58 - - [08/Nov/2026:08:05:12 +0100] "GET /.git/config HTTP/2.0" 301 472 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-08 06:28:51
UTC ·
(8 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 05:29:25
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:29:22.175824 2026] [security2:error] [pid 3680:tid 3680] [client 162.158.172.58:9744] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:29:22.175824 2026] [security2:error] [pid 3680:tid 3680] [client 162.158.172.58:9744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manoli.cl"] [uri "/.git/config"] [unique_id "avAIsscKVCDryayEGeA1FQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-08 04:54:20
UTC ·
(9 hours ago)
Accessed trap at '/.git/HEAD'
Web App Attack
🇧🇪
boxed-it
2026-11-08 04:08:06
UTC ·
(10 hours ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:41:41
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:41:34.416761 2026] [security2:error] [pid 21473:tid 21473] [client 162.158.172.58:11530] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:41:34.416761 2026] [security2:error] [pid 21473:tid 21473] [client 162.158.172.58:11530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "discountphotogifts.com"] [uri "/.git/config"] [unique_id "au_vbl8J3q-Q9SdjHqgSlQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:04:30
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:04:24.988756 2026] [security2:error] [pid 8677:tid 8677] [client 162.158.172.58:13535] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:04:24.988756 2026] [security2:error] [pid 8677:tid 8677] [client 162.158.172.58:13535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoneybluff.com"] [uri "/.git/config"] [unique_id "au_muGd9X4gwTfzVzwZ3TAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
Juha Jurvanen
2026-11-08 02:26:07
UTC ·
(12 hours ago)
Blocked by Scantide Guard on HTTP. Rule: Immediate HTTP block: high-confidence web attack pattern matched '*/.git/config*'..
Brute-Force
🇺🇸
TPI-Abuse
2026-11-08 01:26:34
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:26:30.500721 2026] [security2:error] [pid 9303:tid 9303] [client 162.158.172.58:9362] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:26:30.500721 2026] [security2:error] [pid 9303:tid 9303] [client 162.158.172.58:9362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tigerallenyim.com"] [uri "/.git/HEAD"] [unique_id "au_PxjajRhh5gDovRvU1ygAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:00:58
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:00:49.146368 2026] [security2:error] [pid 4036:tid 4036] [client 162.158.172.58:12165] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:00:49.146368 2026] [security2:error] [pid 4036:tid 4036] [client 162.158.172.58:12165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angelaridgwaydressage.com"] [uri "/.git/config"] [unique_id "au_JwVgyBxxaYs_sL3oPYQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-08 00:29:44
UTC ·
(14 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
todix
2026-11-07 23:08:50
UTC ·
(15 hours ago)
"GET /.git/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
