🇺🇸
TPI-Abuse
2026-11-08 11:11:23
UTC ·
(53 minutes ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:11:18.968865 2026] [security2:error] [pid 31558:tid 31558] [client 162.158.172.82:12275] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:11:18.968865 2026] [security2:error] [pid 31558:tid 31558] [client 162.158.172.82:12275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.exoticcarwrap.com"] [uri "/.git/HEAD"] [unique_id "avBY1ukrqjTbaZ2woJNZUQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 10:14:08
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:14:01.658002 2026] [security2:error] [pid 24035:tid 24097] [client 162.158.172.82:11396] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:14:01.658002 2026] [security2:error] [pid 24035:tid 24097] [client 162.158.172.82:11396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stewardship360.property-management-companies-chicago.com"] [uri "/.git/HEAD"] [unique_id "avBLabhGTd9oQSS6cTIS5QAAAcA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-08 04:54:25
UTC ·
(7 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-08T04:52:51.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:11:00
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:10:51.635700 2026] [security2:error] [pid 32622:tid 32622] [client 162.158.172.82:13440] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:10:51.635700 2026] [security2:error] [pid 32622:tid 32622] [client 162.158.172.82:13440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ellestark.com"] [uri "/.git/HEAD"] [unique_id "au_2S8LoF8elC20803b_GAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:38:22
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:38:14.633417 2026] [security2:error] [pid 2866289:tid 2866304] [client 162.158.172.82:10 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:38:14.633417 2026] [security2:error] [pid 2866289:tid 2866304] [client 162.158.172.82:10616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lapulperiagirona.com.webcraftestudio.com"] [uri "/.git/HEAD"] [unique_id "au_upoyUAq8Lk4I-NCJlvgAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:22:56
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:22:50.474730 2026] [security2:error] [pid 14495:tid 14495] [client 162.158.172.82:12123] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:22:50.474730 2026] [security2:error] [pid 14495:tid 14495] [client 162.158.172.82:12123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohnosound.com"] [uri "/.git/config"] [unique_id "au_c-obdvTBYrZ64u1JQhgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 21:36:39
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:36:33.788250 2026] [security2:error] [pid 12258:tid 12258] [client 162.158.172.82:13967] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:36:33.788250 2026] [security2:error] [pid 12258:tid 12258] [client 162.158.172.82:13967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ornirwellness.com"] [uri "/.git/HEAD"] [unique_id "au-Z4fc7BGEZ7prYdZIafQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-06 10:10:10
UTC ·
(2 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:17:37
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:17:30.688842 2026] [security2:error] [pid 18521:tid 18521] [client 162.158.172.82:13947] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:17:30.688842 2026] [security2:error] [pid 18521:tid 18521] [client 162.158.172.82:13947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnbentley.modelengines.info"] [uri "/.git/config"] [unique_id "auuu-lrr1S5Qttp580LcKgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-04 06:02:36
UTC ·
(4 days ago)
[mx01aln] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.82 - - [04/Nov/2026:07:02:22 +0100] "GET /.git/config HTTP/2.0" 301 502 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[mx01aln] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.82 - - [04/Nov/2026:07:02:22 +0100] "GET /.git/config HTTP/2.0" 301 502 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
162.158.172.82 - - [04/Nov/2026:07:02:22 +0100] "GET /.git/HEAD HTTP/2.0" 301 502 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-03 09:45:12
UTC ·
(5 days ago)
CrowdSec detection: crowdsecurity/http-probing
Hacking
Web App Attack
🇺🇸
MPL
2026-11-02 19:41:38
UTC ·
(5 days ago)
tcp/443 (16 or more attempts)
Port Scan
🇺🇸
TPI-Abuse
2026-11-01 23:43:17
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 18:43:11.570893 2026] [security2:error] [pid 2099:tid 2099] [client 162.158.172.82:13624] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 18:43:11.570893 2026] [security2:error] [pid 2099:tid 2099] [client 162.158.172.82:13624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.isyourcompanysafe.com"] [uri "/.git/HEAD"] [unique_id "aufOjx7P1rjFZlxezkYv_QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 13:03:21
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 08:03:16.097318 2026] [security2:error] [pid 2190714:tid 2190714] [client 162.158.172.82:11 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 08:03:16.097318 2026] [security2:error] [pid 2190714:tid 2190714] [client 162.158.172.82:11494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-italy.com.yacht-register-holland.com"] [uri "/.git/HEAD"] [unique_id "auc4lJl16vYmNi1hCOzyhgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 19:28:12
UTC ·
(1 week ago)
Web probing (1 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
Web App Attack