🇺🇸
TPI-Abuse
2026-07-16 14:40:23
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 3.71.29.93 (ec2-3-71-29-93.eu-central-1.compute ...
show more
(mod_security) mod_security (id:210492) triggered by 3.71.29.93 (ec2-3-71-29-93.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 10:40:15.209505 2026] [security2:error] [pid 31480:tid 31480] [client 3.71.29.93:40654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonjazzorchestra.com"] [uri "/.git/config"] [unique_id "aljtT_UxBvjbnEw9Bz-gWwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-16 14:33:41
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇬🇧
thetomtaylor.co.uk
2026-07-16 13:07:02
(2 days ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack
🇫🇷
masterguru
2026-07-16 12:05:26
(2 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 07:49:08
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 3.71.29.93 (ec2-3-71-29-93.eu-central-1.compute ...
show more
(mod_security) mod_security (id:210492) triggered by 3.71.29.93 (ec2-3-71-29-93.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 03:49:00.892666 2026] [security2:error] [pid 16205:tid 16205] [client 3.71.29.93:50052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "macromika.com"] [uri "/.git/config"] [unique_id "aliM7KMBHWNQ16P4iJ3xCwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 07:23:25
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 3.71.29.93 (ec2-3-71-29-93.eu-central-1.compute ...
show more
(mod_security) mod_security (id:210492) triggered by 3.71.29.93 (ec2-3-71-29-93.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 03:23:17.194491 2026] [security2:error] [pid 16422:tid 16422] [client 3.71.29.93:43920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "macro-astrology.com"] [uri "/.git/config"] [unique_id "aliG5eCjzgRUqfQi6I4dxAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-07-16 06:30:08
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇨🇭
zynex
2026-07-15 22:17:54
(3 days ago)
URL Probing: /.env
Web App Attack
🇯🇵
beon
2026-07-15 13:02:21
(3 days ago)
[DateTime=>2026-07-15T13:02:21Z to 2026-07-15T13:05:12Z (UTC)] , [HoneyPot_Hits=>514 times] , [Honey ...
show more
[DateTime=>2026-07-15T13:02:21Z to 2026-07-15T13:05:12Z (UTC)] , [HoneyPot_Hits=>514 times] , [HoneyPots=>/.git/config, /.env, /.env.local, /.env.production, /.env.staging, /.env.development and others] , [404targets=>/_environment, /phpinfo.php.bak, /phpinfo.php.old, /phpinfo.php~, /info.php.bak, /phpinfo.php.save] , [total_Hits=>536 times] , [hit_per_second=>3.13] , [Keyword=>WordPress, PHP web shells]
show less
Bad Web Bot
Web App Attack
Hacking