🇺🇸
TPI-Abuse
2026-11-15 17:35:13
UTC ·
(20 minutes ago)
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:35:05.935728 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:35:05.935728 2026] [security2:error] [pid 24393:tid 24393] [client 18.145.95.214:49862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neo-zone.net"] [uri "/.git/config"] [unique_id "avntSUbUYIb7pvmEAuS_YAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-11-15 17:21:23
UTC ·
(34 minutes ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇳🇱
WeCloudit-Anti-Abuse
2026-11-15 16:15:15
UTC ·
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-15 14:59:44
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:59:40.655739 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:59:40.655739 2026] [security2:error] [pid 18033:tid 18033] [client 18.145.95.214:35490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neilvboyer.com"] [uri "/.git/config"] [unique_id "avnI3AqKubv3J5E3KSJa1gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
easy-job.ai
2026-11-15 13:56:29
UTC ·
(3 hours ago)
Repeated HTTP probes for non-public sensitive files or common web application endpoints. Requests were rejected by scan protection and the source IP was temporarily blocked.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 13:25:06
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:24:56.037611 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:24:56.037611 2026] [security2:error] [pid 8074:tid 8074] [client 18.145.95.214:36416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neff.family.name"] [uri "/.git/config"] [unique_id "avmyqMxv2uv-tj-muSkvDwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-15 13:21:37
UTC ·
(4 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 12:58:46
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:58:37.346112 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:58:37.346112 2026] [security2:error] [pid 13626:tid 13626] [client 18.145.95.214:50096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "needtoorder.us"] [uri "/.git/config"] [unique_id "avmsfRB-wqU5hWmHQ1fhOwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-15 12:38:48
UTC ·
(5 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-11-15 12:25:06
UTC ·
(5 hours ago)
20 attempts against mh_ha-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 11:56:54
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:56:49.168452 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:56:49.168452 2026] [security2:error] [pid 13579:tid 13579] [client 18.145.95.214:41378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neconebooks.com"] [uri "/.git/config"] [unique_id "avmeAZcyAhXHX4g7Dgpy1AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 09:56:31
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:56:27.295618 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 18.145.95.214 (ec2-18-145-95-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:56:27.295618 2026] [security2:error] [pid 10429:tid 10429] [client 18.145.95.214:53068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nealandmichaeledesign.com"] [uri "/.git/config"] [unique_id "avmByxu1rGVRWVtzwqrMogAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack