🇺🇸
k3rn3l109
2026-07-30 23:25:03
(4 weeks ago)
Sentinel honeypot: opencanary-redis hit on fake Redis service (server-01-CA) UA=opencanary
Port Scan
Hacking
🇫🇷
ACE-INFORMATIQUE.NC
2026-07-20 19:00:10
(1 month ago)
Brute-Force + SSH blocked by Fail2ban
Brute-Force
SSH
🇺🇸
tedmichalik.com
2026-07-18 13:02:35
(1 month ago)
103.151.173.99 - - [18/Jul/2026:09:02:24 -0400] "\x16\x03\x01\x02" 400 517 "-" "-"
...
Web App Attack
🇩🇪
www.fransveldman.world
2026-07-14 04:00:28
(1 month ago)
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
Bad Web Bot
🇬🇧
thetomtaylor.co.uk
2026-07-09 03:08:01
(1 month ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02,mx01,mx02,mx03,wa ...
show more
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02,mx01,mx02,mx03,wa01,wa02]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 23:47:48
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:47:39.335050 2026] [security2:error] [pid 23838:tid 23838] [client 103.151.173.99:16698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hamiltoncountyuca.org"] [uri "/.env.development"] [unique_id "akrtG5At3yndSbR4e1iRGAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 17:58:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 13:58:43.379689 2026] [security2:error] [pid 13118:tid 13118] [client 103.151.173.99:57754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "givemethemic.org"] [uri "/wp-config.bak"] [unique_id "akqbU4fVUaWozYyaKPSFEAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Matthew Ping
2026-07-04 16:45:01
(1 month ago)
ModSecurity rule 949110 triggered on wp3. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-03 10:38:49
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 06:38:42.009629 2026] [security2:error] [pid 18559:tid 18559] [client 103.151.173.99:13453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danzadance.org"] [uri "/.env.development"] [unique_id "akeRMioP4Gbx0B1BNE1XoQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 06:46:17
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:46:07.296385 2026] [security2:error] [pid 19973:tid 19973] [client 103.151.173.99:37101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dc406.org"] [uri "/.env.staging"] [unique_id "akdar5DMpzBcegw7eU_f9wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 23:31:55
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:31:47.573139 2026] [security2:error] [pid 6578:tid 6578] [client 103.151.173.99:15142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crep-psych.org"] [uri "/.env.development"] [unique_id "akb041UNnE4D_1YwE3iPRAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 13:49:12
(1 month ago)
(mod_security) mod_security (id:949110) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 09:49:06.453321 2026] [security2:error] [pid 11477:tid 11477] [client 103.151.173.99:60635] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chuckwagon.org"] [uri "/.env"] [unique_id "akZsUpVl3gHCoQxKxe2FdAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 09:59:23
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:59:15.641846 2026] [security2:error] [pid 3228:tid 3346] [client 103.151.173.99:33217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cityofmiddleton.org"] [uri "/.env"] [unique_id "akY2c_NJPJKjHyrfOdDGUQAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 05:41:26
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:41:19.480330 2026] [security2:error] [pid 5398:tid 5398] [client 103.151.173.99:50754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chezlubacov.org"] [uri "/wp-config.php.save"] [unique_id "akX5_9mA6C8AC81A7YFnpQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 03:24:26
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 103.151.173.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:24:17.459765 2026] [security2:error] [pid 3618:tid 3618] [client 103.151.173.99:31956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carpentersbattery.org"] [uri "/.env.example"] [unique_id "akXZ4azaR0orJjMyFJeuowAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
