Anonymous
2025-11-29 10:59:25
UTC ·
(11 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-11-16 11:51:20
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 06:51:13.914892 2025] [security2:error] ...
show more
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 06:51:13.914892 2025] [security2:error] [pid 27953:tid 27953] [client 18.143.160.50:51490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "probeanalysis.com.afjm.net"] [uri "/.env.production"] [unique_id "aRm6sXmeDDcrD1Udzr6X4AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-16 07:36:24
UTC ·
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
Mr-Money
2025-11-16 06:43:22
UTC ·
(11 months ago)
scenario: crowdsecurity/modsecurity - events: 1 - Matched Data: .env found within REQUEST_FILENAME: /.env
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 04:14:37
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 23:14:33.144215 2025] [security2:error] ...
show more
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 23:14:33.144215 2025] [security2:error] [pid 30214:tid 30214] [client 18.143.160.50:58070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pspsociety.org.edfisherco.com"] [uri "/.env"] [unique_id "aRlPqVblgptqPGXxGHHOqwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2025-11-15 14:04:39
UTC ·
(11 months ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 11:59:38
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 06:59:32.444106 2025] [security2:error] ...
show more
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 06:59:32.444106 2025] [security2:error] [pid 4491:tid 4491] [client 18.143.160.50:46220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.waxjet510.com"] [uri "/.git/config"] [unique_id "aRhrJPcYqqFuoOc_SnjEBQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 03:43:43
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:43:40.382730 2025] [security2:error] ...
show more
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:43:40.382730 2025] [security2:error] [pid 9145:tid 9145] [client 18.143.160.50:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.365soft.top"] [uri "/.git/config"] [unique_id "aRf27D77ph3v8zdzQpSTPAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 03:21:14
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:21:10.379769 2025] [security2:error] ...
show more
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 22:21:10.379769 2025] [security2:error] [pid 28427:tid 28427] [client 18.143.160.50:56994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "superstargambling.com"] [uri "/.git/config"] [unique_id "aRfxpgOPzf3UUaYzM96hawAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
cassidycamp.work
2025-11-14 17:19:32
UTC ·
(11 months ago)
Requested /.git
Web App Attack
🇺🇸
TPI-Abuse
2025-11-14 17:17:38
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 12:17:32.040057 2025] [security2:error] ...
show more
(mod_security) mod_security (id:210492) triggered by 18.143.160.50 (ec2-18-143-160-50.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 12:17:32.040057 2025] [security2:error] [pid 1697:tid 1697] [client 18.143.160.50:40350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendeenicole.com"] [uri "/.git/config"] [unique_id "aRdkLCEDRE-faqzA1iJL2gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack