🇩🇪
neckaralb-admin.de
2026-11-15 18:15:44
UTC ·
(7 minutes ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
e.fierstra
2026-11-15 17:06:00
UTC ·
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-15 17:00:12
UTC ·
(1 hour ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 16:36:49
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:36:45.298022 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:36:45.298022 2026] [security2:error] [pid 11523:tid 11523] [client 34.208.117.74:44812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stephenshouse.org.dougscomputers.com"] [uri "/.git/config"] [unique_id "avnfnQP2CUYbOBU4w7xXpAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 16:05:23
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:05:19.707038 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:05:19.707038 2026] [security2:error] [pid 23030:tid 23156] [client 34.208.117.74:57508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stephanie.stauffer.name"] [uri "/.git/config"] [unique_id "avnYP4_1GOhJDn9pxSGmMwAAAYA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-11-15 15:45:20
UTC ·
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.208.117.74 (US/United States/ec2-34-208-117-74.us-west-2.compute.amazonaws.com)
SQL Injection
🇮🇹
CoreTech srl
2026-11-15 15:28:59
UTC ·
(2 hours ago)
cloudlinux2 fail2ban: 2026-11-15 16:24:01,653 fail2ban.filter [1647]: INFO [plesk-wordpress] Found 91.193.232.101 - 2026-11-15 16:24:00cloudlinux2 fail2ban: 2026-11-15 16:24:00,224 fail2ban.filter [1647]: INFO [plesk-modsecurity ...
show more
cloudlinux2 fail2ban: 2026-11-15 16:24:01,653 fail2ban.filter [1647]: INFO [plesk-wordpress] Found 91.193.232.101 - 2026-11-15 16:24:00cloudlinux2 fail2ban: 2026-11-15 16:24:00,224 fail2ban.filter [1647]: INFO [plesk-modsecurity] Found 106.206.193.166 - 2026-11-15 16:24:00cloudlinux2 fail2ban: 2026-11-15 16:25:09,520 fail2ban.filter [1647]: INFO [plesk-wordpress] Found 49.47.192.215 - 2026-11-15 16:25:08cloudlinux2 fail2ban: 2026-11-15 16:25:46,216 fail2ban.filter [1647]: INFO [plesk-modsecurity] Found 34.208.117.74 - 2026-11-15 16:25:46cloudlinux2 fail2ban: 2026-11-15 16:25:45,709 fail2ban.filter [1647]: INFO [plesk-modsecurity] Found 34.208.117.74 - 2026-11-15 16:25:45cloudlinux2 fail2ban: 2026-11-15 16:25:46,554 fail2ban.filter [1647]: INFO [plesk-modsecurity] Found 34.208.117.74 - 2026-11-15 16:25:46cloudlinux2 fail2ban: 2026-11-15 16:25:41,124 fail2ban.filter [1647]: INFO [plesk-wordpress] Found 91.237.122.235 - 2026-11-15 16:25
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 15:27:49
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:27:44.919263 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:27:44.919263 2026] [security2:error] [pid 2503:tid 2503] [client 34.208.117.74:49356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stenbot.com"] [uri "/.git/config"] [unique_id "avnPcJw0HMUS61kDmlEoiwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
bdkreatif
2026-11-15 14:54:46
UTC ·
(3 hours ago)
Automated block: probing for .env files; probing for .git/.svn
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 14:53:04
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:52:56.512180 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:52:56.512180 2026] [security2:error] [pid 14977:tid 14977] [client 34.208.117.74:36104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stellwagenmusic.com"] [uri "/.git/config"] [unique_id "avnHSO9FGu6Nx5h15Xhi8AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 13:38:48
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:38:43.990848 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:38:43.990848 2026] [security2:error] [pid 4493:tid 4493] [client 34.208.117.74:59982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steinrauffamilylaw.com"] [uri "/.git/config"] [unique_id "avm14xhrxIdJ9x-DYqFBHgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-15 12:45:04
UTC ·
(5 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 10:44:07
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:44:01.612182 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.208.117.74 (ec2-34-208-117-74.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:44:01.612182 2026] [security2:error] [pid 28772:tid 28772] [client 34.208.117.74:43064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steamboatrowena.com"] [uri "/.git/config"] [unique_id "avmM8YisC9aBwvr-6RWaZgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
