🇺🇸
TPI-Abuse
2026-11-15 17:47:15
UTC ·
(36 minutes ago)
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:47:11.812804 2026] [security2:error] [pid 8953:tid 89 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:47:11.812804 2026] [security2:error] [pid 8953:tid 8964] [client 3.91.246.34:34674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cornell61.org"] [uri "/.git/config"] [unique_id "avnwH2ge6CfNHj-iay0V7AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-15 16:39:41
UTC ·
(1 hour ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 3.91.246.34 - - \[15/Nov/2026:17:39:28 +0100\] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/53 ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 3.91.246.34 - - \[15/Nov/2026:17:39:28 +0100\] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 16:31:03
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:30:56.975675 2026] [security2:error] [pid 6277:tid 62 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:30:56.975675 2026] [security2:error] [pid 6277:tid 6277] [client 3.91.246.34:33188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coretherapyassoc.com.praemiumtech.com"] [uri "/.git/config"] [unique_id "avneQP7eUnwtK3IO4NLcpAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ItsJustStan
2026-11-15 16:08:49
UTC ·
(2 hours ago)
Web app attack - scanning for vulnerabilities
Web App Attack
2026-11-15 16:08:00
UTC ·
(2 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇩🇪
macrob
2026-11-15 15:47:00
UTC ·
(2 hours ago)
2026/11/15 15:46:58 [error] 349546#349546: *9496033 access forbidden by rule, client: 3.91.246.34, server: binixo.lk, request: "GET /.git/config HTTP/2.0", host: "binixo.lk"
2026/11/15 15:46:59 [error] 349546#349546: *9496060 access forbidden by rule ...
show more
2026/11/15 15:46:58 [error] 349546#349546: *9496033 access forbidden by rule, client: 3.91.246.34, server: binixo.lk, request: "GET /.git/config HTTP/2.0", host: "binixo.lk"
2026/11/15 15:46:59 [error] 349546#349546: *9496060 access forbidden by rule, client: 3.91.246.34, server: binixo.lk, request: "GET /.env HTTP/2.0", host: "binixo.lk"
2026/11/15 15:46:59 [error] 349542#349542: *9496083 access forbidden by rule, client: 3.91.246.34, server: binixo.lk, request: "GET /.env.local HTTP/2.0", host: "binixo.lk"
...
show less
Web App Attack
🇮🇹
VHosting
2026-11-15 12:25:08
UTC ·
(5 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 10:26:36
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:26:29.275096 2026] [security2:error] [pid 25786:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:26:29.275096 2026] [security2:error] [pid 25786:tid 25786] [client 3.91.246.34:51738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "copiersdurham.com"] [uri "/.git/config"] [unique_id "avmI1VknulcvilvVPR0q6wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 09:42:46
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:42:41.339122 2026] [security2:error] [pid 10438:tid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:42:41.339122 2026] [security2:error] [pid 10438:tid 10525] [client 3.91.246.34:55526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "copex-ireland.com"] [uri "/.git/config"] [unique_id "avl-kfGI-jw-BkMoNXpqWgAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-15 09:34:41
UTC ·
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 20:52:29
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 16:52:24.158545 2026] [security2:error] [pid 15551:tid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 16:52:24.158545 2026] [security2:error] [pid 15551:tid 15551] [client 3.91.246.34:51044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.xmlprotocol.com"] [uri "/.git/HEAD"] [unique_id "ajb9iNU3FP-5xuD_hzMFWAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 19:19:55
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 15:19:48.664528 2026] [security2:error] [pid 782:tid 782 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.91.246.34 (ec2-3-91-246-34.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 15:19:48.664528 2026] [security2:error] [pid 782:tid 782] [client 3.91.246.34:50662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fatcavemedia.com"] [uri "/.git/HEAD"] [unique_id "ajbn1O6E9mEJ3Xr6tRYvqgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
