🇺🇸
TPI-Abuse
2025-11-26 22:20:52
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 17:20:47.101042 2025] [security2:error] [pid 19610:tid 19629] [client 185.158.132.239:57648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "duplexgoldmine.com"] [uri "/.git/config"] [unique_id "aSd9P7j-LQS5wH09ap7wZAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-23 20:25:46
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 15:25:41.199431 2025] [security2:error] [pid 26581:tid 26581] [client 185.158.132.239:51498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiesidebikinis.com"] [uri "/.git/config"] [unique_id "aSNtxXv-qDIaB4myfLHHAQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-21 17:58:55
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 12:58:47.304133 2025] [security2:error] [pid 30956:tid 30956] [client 185.158.132.239:38808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mceldufftherapist.com"] [uri "/.git/config"] [unique_id "aSCoVxTA4Q8mDocN8535AQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-20 15:27:27
(10 months ago)
185.158.132.239 - - [20/Nov/2025:16:27:26 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "facebookex ...
show more
185.158.132.239 - - [20/Nov/2025:16:27:26 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-19 20:27:42
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 15:27:34.300789 2025] [security2:error] [pid 29416:tid 29416] [client 185.158.132.239:36100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "directnicvpn.com"] [uri "/.git/config"] [unique_id "aR4oNuAXKJ0AqMe6mlGEjwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Carsten
2025-11-12 12:07:22
(11 months ago)
GET [.git/config]
Port Scan
🇦🇺
Asimar
2025-11-12 01:15:27
(11 months ago)
(mod_security) mod_security triggered on hostname [redacted] 185.158.132.239 (FR/France/srv687738.hs ...
show more
(mod_security) mod_security triggered on hostname [redacted] 185.158.132.239 (FR/France/srv687738.hstgr.cloud): (CF_ENABLE)
show less
SQL Injection
🇫🇷
Thaliruth
2025-11-11 15:49:54
(11 months ago)
[11/Nov/2025:16:49:54.473437 +0100] aRNbIkj3GD-G8gsPZ9FhPwAAAA0 185.158.132.239 39524 127.0.0.1 7081 ...
show more
[11/Nov/2025:16:49:54.473437 +0100] aRNbIkj3GD-G8gsPZ9FhPwAAAA0 185.158.132.239 39524 127.0.0.1 7081
...
show less
Hacking
🇳🇱
homeshowdomain.nl
2025-11-07 22:59:31
(11 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-06.
show less
Hacking
Web App Attack
SSH
🇳🇱
homeshowdomain.nl
2025-11-06 23:00:41
(11 months ago)
Auto-ban: >3000 req/min op 2025-11-06
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-03 22:08:04
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 17:07:57.998473 2025] [security2:error] [pid 22838:tid 22838] [client 185.158.132.239:38810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ten0.forefrontmusic.com"] [uri "/.git/config"] [unique_id "aQknvTeDiqs2pyhkw6g9AwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-17 20:56:02
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 16:55:54.996297 2025] [security2:error] [pid 26377:tid 26377] [client 185.158.132.239:47624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.playerpianocare.player-care.com"] [uri "/.env"] [unique_id "aMsgWum5SuuGqn_qtufZ_gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-17 08:17:51
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 04:17:46.406224 2025] [security2:error] [pid 1342654:tid 1342654] [client 185.158.132.239:35986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegrousewoods.com"] [uri "/.env"] [unique_id "aMpuqmzU2n3VBymyUlxNOgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 23:01:38
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 19:01:31.806942 2025] [security2:error] [pid 27263:tid 27263] [client 185.158.132.239:46354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "parkhan.com"] [uri "/.env"] [unique_id "aMnsS94vOzW0dlf1xI1rmgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 20:59:10
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 185.158.132.239 (srv687738.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 16:59:03.098821 2025] [security2:error] [pid 18819:tid 18985] [client 185.158.132.239:38552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fix4life.com"] [uri "/.env"] [unique_id "aMnPl3TQgj2-Nb0BdHdgKgAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack