2026-11-12 04:35:04
UTC ·
(45 minutes ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
Robka
2026-11-12 00:49:51
UTC ·
(4 hours ago)
162.158.172.84 - - [12/Nov/2026:00:49:51 +0000] "GET /.git/HEAD HTTP/2.0" 404 10814 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0" "toolrecall.dev"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 00:40:55
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 19:40:48.326782 2026] [security2:error] [pid 20924:tid 20924] [client 162.158.172.84:12624] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 19:40:48.326782 2026] [security2:error] [pid 20924:tid 20924] [client 162.158.172.84:12624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.soulwolf.com"] [uri "/.git/HEAD"] [unique_id "avULEGEiBCrOf5ECL2xFDwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-11 23:44:52
UTC ·
(5 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:53:57
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:53:52.701462 2026] [security2:error] [pid 21639:tid 21639] [client 162.158.172.84:9526] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:53:52.701462 2026] [security2:error] [pid 21639:tid 21639] [client 162.158.172.84:9526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thereisaplaceonearth.com"] [uri "/.git/config"] [unique_id "avTyAGmsN4rlaZxpZtdNGQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
lightaffaire
2026-11-11 22:42:03
UTC ·
(6 hours ago)
Nov 11 23:42:02 declico.com 162.158.172.84 - - [11/Nov/2026:23:42:02 +0100] "GET /.git/config HTTP/2.0" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 0.000400615
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:14:04
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:13:58.280166 2026] [security2:error] [pid 28007:tid 28007] [client 162.158.172.84:13904] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:13:58.280166 2026] [security2:error] [pid 28007:tid 28007] [client 162.158.172.84:13904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spittingimagegallery.kathrynmcbride.com"] [uri "/.git/HEAD"] [unique_id "avTopmUq4ipLqGtWyMBA0wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:01:49
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:01:44.091918 2026] [security2:error] [pid 24678:tid 24678] [client 162.158.172.84:11018] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:01:44.091918 2026] [security2:error] [pid 24678:tid 24678] [client 162.158.172.84:11018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.chooseyourowntrail.com"] [uri "/.git/HEAD"] [unique_id "avTXuI-yRXiJAAUyHcG5DQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:37:13
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:37:09.863751 2026] [security2:error] [pid 19361:tid 19361] [client 162.158.172.84:10109] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:37:09.863751 2026] [security2:error] [pid 19361:tid 19361] [client 162.158.172.84:10109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qu1ck.com"] [uri "/.git/HEAD"] [unique_id "avTR9dwHSL8tVXRDMwS2CAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:47:33
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:47:26.406499 2026] [security2:error] [pid 30693:tid 30693] [client 162.158.172.84:12644] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:47:26.406499 2026] [security2:error] [pid 30693:tid 30693] [client 162.158.172.84:12644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.igpcloud.biz"] [uri "/.git/config"] [unique_id "avRx7mGj4NBzxymZjtu4mgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-11-09 18:16:03
UTC ·
(2 days ago)
162.158.172.84 - - [09/Nov/2026:19:16:02 +0100] "GET /.git/HEAD HTTP/2.0" 403 253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 17:12:33
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:12:26.921768 2026] [security2:error] [pid 4220:tid 4220] [client 162.158.172.84:12724] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:12:26.921768 2026] [security2:error] [pid 4220:tid 4220] [client 162.158.172.84:12724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.no504.com"] [uri "/.git/config"] [unique_id "avH--qxM1Uhqcjh3Jq15fgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:54:53
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:54:49.551208 2026] [security2:error] [pid 3558:tid 3558] [client 162.158.172.84:10463] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:54:49.551208 2026] [security2:error] [pid 3558:tid 3558] [client 162.158.172.84:10463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.chyps.com"] [uri "/.git/HEAD"] [unique_id "avHeuaTIstnC4pR3eteXXwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-09 13:47:36
UTC ·
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:47:31
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:47:25.646399 2026] [security2:error] [pid 23700:tid 23700] [client 162.158.172.84:9818] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:47:25.646399 2026] [security2:error] [pid 23700:tid 23700] [client 162.158.172.84:9818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.littlebiglebanon.com"] [uri "/.git/config"] [unique_id "avHO7ZAUeHU9omb06iF9wgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
