🇺🇸
TPI-Abuse
2026-11-10 02:35:26
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:35:20.185751 2026] [security2:error] [pid 32516:tid 32516] [client 162.158.172.73:11184] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:35:20.185751 2026] [security2:error] [pid 32516:tid 32516] [client 162.158.172.73:11184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.eta-mct.com"] [uri "/.git/HEAD"] [unique_id "avKC6Ey9wfFBe9tJP6uKIwAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:36:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:36:00.332485 2026] [security2:error] [pid 8162:tid 8162] [client 162.158.172.73:13477] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:36:00.332485 2026] [security2:error] [pid 8162:tid 8162] [client 162.158.172.73:13477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.richardlyne.com"] [uri "/.git/config"] [unique_id "avH2cCByDcDIp1eMEf79iQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:35:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:35:26.815613 2026] [security2:error] [pid 16708:tid 16708] [client 162.158.172.73:10201] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:35:26.815613 2026] [security2:error] [pid 16708:tid 16708] [client 162.158.172.73:10201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.grabnerconsulting.com"] [uri "/.git/HEAD"] [unique_id "avG-DrbcMGPrWM3B1l4SIwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-11-09 10:09:34
UTC ·
(1 day ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 08:27:04
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:29:49
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:29:41.387643 2026] [security2:error] [pid 10098:tid 10098] [client 162.158.172.73:13078] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:29:41.387643 2026] [security2:error] [pid 10098:tid 10098] [client 162.158.172.73:13078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rudiscreations.org"] [uri "/.git/HEAD"] [unique_id "avFoVS8N6Egphd671ZfOOAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-09 04:21:51
UTC ·
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-09 04:05:04
UTC ·
(1 day ago)
[09/Nov/2026:06:05:04 +0200] -- 162.158.172.73 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:01:08
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:01:04.090610 2026] [security2:error] [pid 29320:tid 29320] [client 162.158.172.73:9978] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:01:04.090610 2026] [security2:error] [pid 29320:tid 29320] [client 162.158.172.73:9978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ftiptondds.com"] [uri "/.git/HEAD"] [unique_id "avFFgNe8Kd4Te0aGDzBMqwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:27:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:27:39.785437 2026] [security2:error] [pid 30168:tid 30168] [client 162.158.172.73:13037] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:27:39.785437 2026] [security2:error] [pid 30168:tid 30168] [client 162.158.172.73:13037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "78cardz.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.git/HEAD"] [unique_id "avE9qyRu7xsfIzSUrUhaUAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:04:43
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:04:38.467687 2026] [security2:error] [pid 8318:tid 8318] [client 162.158.172.73:10941] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:04:38.467687 2026] [security2:error] [pid 8318:tid 8318] [client 162.158.172.73:10941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.octaviomontes.com"] [uri "/.git/HEAD"] [unique_id "avEqNvg2dfaz7YMRszuvUAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:27:33
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:27:26.243637 2026] [security2:error] [pid 4184:tid 4184] [client 162.158.172.73:13632] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:27:26.243637 2026] [security2:error] [pid 4184:tid 4184] [client 162.158.172.73:13632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.garyrankin.com"] [uri "/.git/config"] [unique_id "avEhfgQWA33HWh5IK1p7XgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:56:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:56:01.198926 2026] [security2:error] [pid 13916:tid 13916] [client 162.158.172.73:10820] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:56:01.198926 2026] [security2:error] [pid 13916:tid 13916] [client 162.158.172.73:10820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.towermedia.net"] [uri "/.git/config"] [unique_id "avEaIbkge_PxlTv7opwPpAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:19:28
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:19:21.613531 2026] [security2:error] [pid 32566:tid 32566] [client 162.158.172.73:11070] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:19:21.613531 2026] [security2:error] [pid 32566:tid 32566] [client 162.158.172.73:11070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.amdavies15.com"] [uri "/.git/config"] [unique_id "avERiTJsMJ_oFMEwyWJX8QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 19:52:24
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:52:17.287959 2026] [security2:error] [pid 1062255:tid 1062392] [client 162.158.172.73:12 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:52:17.287959 2026] [security2:error] [pid 1062255:tid 1062392] [client 162.158.172.73:12830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "austintexasplasticsurgery.aafm.us"] [uri "/.git/config"] [unique_id "avDS8VK0HkLKyb93H_DogQAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack