🇺🇸
TPI-Abuse
2026-07-28 02:37:37
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 22:37:30.761626 2026] [security2:error] [pid 1172323:tid 1172323] [client 52.15.176.178:38762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eric-grant.com"] [uri "/.git/config"] [unique_id "amgV6la6NL5w7cpPD2cBwAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-07-28 01:20:02
(4 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 00:46:47
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 20:46:42.955168 2026] [security2:error] [pid 2570486:tid 2570486] [client 52.15.176.178:60990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ergocorrect.com"] [uri "/.git/config"] [unique_id "amf78vsx8K3AFSG2a2yK2gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 13:13:25
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:13:21.321755 2026] [security2:error] [pid 2318218:tid 2318299] [client 52.15.176.178:35258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ethniclivesmatter.com"] [uri "/.git/config"] [unique_id "amdZcUzp_7Y5sJTVoYy64QAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-07-27 12:25:45
(17 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 52.15.176.178 (US/United States/ec2-52- ...
show more
(mod_security) mod_security triggered on hostname [redacted] 52.15.176.178 (US/United States/ec2-52-15-176-178.us-east-2.compute.amazonaws.com): (CF_ENABLE)
show less
SQL Injection
🇳🇴
Bots.go.to.hell
2026-07-27 06:17:40
(23 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-26 06:05:45
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 02:05:41.210398 2026] [security2:error] [pid 2101857:tid 2101857] [client 52.15.176.178:45572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.meridianranchdrc.org"] [uri "/.git/config"] [unique_id "amWjtZuWkFNXJxr-_YPpCQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-25 22:03:08
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24.
show less
Web App Attack
SSH
Hacking
🇫🇷
YF
2026-07-25 17:30:37
(2 days ago)
Attaque distribuée subnet
DDoS Attack
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-24 22:04:07
(3 days ago)
Auto-ban: >3000 req/min op 2026-07-24
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-24 11:28:23
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 52.15.176.178 (ec2-52-15-176-178.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:28:15.382728 2026] [security2:error] [pid 145583:tid 145583] [client 52.15.176.178:37658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ourodyssey.us"] [uri "/.git/config"] [unique_id "amNMTyxSwx4bumBSyWolkwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-24 09:34:11
(3 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Octopuce
2026-07-24 08:58:56
(3 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇮🇹
VHosting
2026-07-24 03:30:04
(4 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇫🇷
geeek
2025-12-24 17:37:50
(7 months ago)
Port scanning: 554 TCP Blocked
Port Scan