🇩🇪
4server
2026-11-11 00:10:10
UTC ·
(13 hours ago)
[WedNov1101:10:08.7450942026][security2:error][pid3421768:tid3421877][client162.158.172.88:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ...
show more
[WedNov1101:10:08.7450942026][security2:error][pid3421768:tid3421877][client162.158.172.88:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autodiscover.atelier-lara.ch\"][uri\"/.git/config\"][unique_id\"avOyYIHFlXQ_ThphA4OOjAAAAQA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇮🇹
sssrit
2026-11-10 19:51:25
UTC ·
(17 hours ago)
162.158.172.88 - - [10/Nov/2026:20:51:24 +0100] "GET /.git/HEAD HTTP/2.0" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Web App Attack
🇺🇸
CBJ
2026-11-10 17:15:21
UTC ·
(20 hours ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:36:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:35:54.801645 2026] [security2:error] [pid 15153:tid 15153] [client 162.158.172.88:10181] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:35:54.801645 2026] [security2:error] [pid 15153:tid 15153] [client 162.158.172.88:10181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guavaroad.com"] [uri "/.git/config"] [unique_id "avKRGkyx-AX8qZWICHKD4QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:55:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:55:40.342838 2026] [security2:error] [pid 12677:tid 12677] [client 162.158.172.88:10634] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:55:40.342838 2026] [security2:error] [pid 12677:tid 12677] [client 162.158.172.88:10634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mywhisperkids.com"] [uri "/.git/HEAD"] [unique_id "avKHrE7RS7Kq5jY3PWJBngAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:12:48
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:12:44.756648 2026] [security2:error] [pid 30030:tid 30030] [client 162.158.172.88:12885] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:12:44.756648 2026] [security2:error] [pid 30030:tid 30030] [client 162.158.172.88:12885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wooferhound.com"] [uri "/.git/HEAD"] [unique_id "avJvjL3aKOVJqFmZUTS6qQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-09 20:39:39
UTC ·
(1 day ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.88 - - [09/Nov/2026:21:39:37 +0100] "GET /.git/config HTTP/2.0" 301 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Geck ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.172.88 - - [09/Nov/2026:21:39:37 +0100] "GET /.git/config HTTP/2.0" 301 229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:57:48
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:57:42.533133 2026] [security2:error] [pid 6177:tid 6177] [client 162.158.172.88:13925] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:57:42.533133 2026] [security2:error] [pid 6177:tid 6177] [client 162.158.172.88:13925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "directoryofdrugs.com"] [uri "/.git/config"] [unique_id "avHRVpCnlJSlSZF8Ib1lVAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:37:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:37:08.550156 2026] [security2:error] [pid 27531:tid 27531] [client 162.158.172.88:10788] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:37:08.550156 2026] [security2:error] [pid 27531:tid 27531] [client 162.158.172.88:10788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.coretermite.com"] [uri "/.git/config"] [unique_id "avHMhKSpEDOdAdyljgkt7QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:18:19
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:18:13.227931 2026] [security2:error] [pid 2053:tid 2053] [client 162.158.172.88:10401] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:18:13.227931 2026] [security2:error] [pid 2053:tid 2053] [client 162.158.172.88:10401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nlc-calumet.org"] [uri "/.git/HEAD"] [unique_id "avGr9eHoarVMBDOyx5RHVwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:50:18
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:50:11.500490 2026] [security2:error] [pid 15781:tid 15781] [client 162.158.172.88:11391] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:50:11.500490 2026] [security2:error] [pid 15781:tid 15781] [client 162.158.172.88:11391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.smartstylehair.com"] [uri "/.git/HEAD"] [unique_id "avFfEzzIdZqA9SaPo1zNDAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-09 05:11:13
UTC ·
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
Bedios GmbH
2026-11-09 02:31:19
UTC ·
(2 days ago)
Scanning for exposed credentials and private keys.
Hacking
🇺🇸
TPI-Abuse
2026-11-09 01:33:53
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:33:46.257603 2026] [security2:error] [pid 5937:tid 5937] [client 162.158.172.88:11184] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:33:46.257603 2026] [security2:error] [pid 5937:tid 5937] [client 162.158.172.88:11184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.piperwaite.com"] [uri "/.git/config"] [unique_id "avEi-kPsEiGH-GLJuYkM7QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:08:04
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:08:01.886335 2026] [security2:error] [pid 11786:tid 11812] [client 162.158.172.88:10694] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.172.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:08:01.886335 2026] [security2:error] [pid 11786:tid 11812] [client 162.158.172.88:10694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webprog.howiek.com"] [uri "/.git/config"] [unique_id "avCsccWcSs-qIfifWpa5DwAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
