🇩🇪
altenglaner
2026-11-09 19:37:43
UTC ·
(3 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:10:01
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:09:54.093629 2026] [security2:error] [pid 21955:tid 21955] [client 162.158.172.60:10937] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:09:54.093629 2026] [security2:error] [pid 21955:tid 21955] [client 162.158.172.60:10937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mtalame.com"] [uri "/.git/HEAD"] [unique_id "avHGIqlNvN-yiBxaJjQ3pAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:19:51
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:19:46.456607 2026] [security2:error] [pid 3981:tid 3981] [client 162.158.172.60:13776] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:19:46.456607 2026] [security2:error] [pid 3981:tid 3981] [client 162.158.172.60:13776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.namefinder.com"] [uri "/.git/HEAD"] [unique_id "avFX8oJRv5M_hGC6mdwdoAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-09 04:52:17
UTC ·
(17 hours ago)
[09/Nov/2026:06:52:17 +0200] -- 162.158.172.60 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:46:38
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:46:33.286108 2026] [security2:error] [pid 30416:tid 30416] [client 162.158.172.60:13186] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:46:33.286108 2026] [security2:error] [pid 30416:tid 30416] [client 162.158.172.60:13186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.steveleeds.com"] [uri "/.git/HEAD"] [unique_id "avEl-cGYAPlroetqm-DycQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 13:07:41
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:07:38.496156 2026] [security2:error] [pid 16831:tid 16831] [client 162.158.172.60:12135] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:07:38.496156 2026] [security2:error] [pid 16831:tid 16831] [client 162.158.172.60:12135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.spotsysanta.com"] [uri "/.git/HEAD"] [unique_id "avB0GrFvVCicCZQeHQnLGQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:36:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:36:00.271132 2026] [security2:error] [pid 956:tid 956] [client 162.158.172.60:10095] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:36:00.271132 2026] [security2:error] [pid 956:tid 956] [client 162.158.172.60:10095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cincypcs.savingshvac.com"] [uri "/.git/config"] [unique_id "au_gEIp5DwW_T3wUhtPEbAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:16:41
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:16:34.558437 2026] [security2:error] [pid 1045:tid 1045] [client 162.158.172.60:11893] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:16:34.558437 2026] [security2:error] [pid 1045:tid 1045] [client 162.158.172.60:11893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vesalappi.com"] [uri "/.git/config"] [unique_id "au_bgoSCbuKoWIltsJBc-QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mail.avx.gr
2026-11-05 04:25:42
UTC ·
(4 days ago)
plesk-rapid-ban sensitive-file-probe host=sxetakis.avx.gr
Hacking
🇧🇪
boxed-it
2026-11-04 06:16:15
UTC ·
(5 days ago)
GET /.git/config (Tarpitted for 19s, wasted 1.17kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 02:38:39
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 21:38:31.630927 2026] [security2:error] [pid 10164:tid 10164] [client 162.158.172.60:14238] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 21:38:31.630927 2026] [security2:error] [pid 10164:tid 10164] [client 162.158.172.60:14238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aisoftwaretools.michaelthompson.biz"] [uri "/.git/config"] [unique_id "auqap5BZYqFoLEqGxFK3wgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski.com
2026-11-01 04:17:52
UTC ·
(1 week ago)
IVski WAF | Sensitive file probe - looking for .git
Hacking
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-25 22:59:50
UTC ·
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-10-25
Web App Attack
SSH
Hacking
🇧🇪
madeit
2026-10-25 16:52:09
UTC ·
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 02:05:24
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:05:18.642255 2026] [security2:error] [pid 20734:tid 20734] [client 162.158.172.60:12467] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:05:18.642255 2026] [security2:error] [pid 20734:tid 20734] [client 162.158.172.60:12467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.utp.cyber507.net"] [uri "/.git/HEAD"] [unique_id "at1j3gHV4g1X2WmbBQoHlQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
