🇬🇧
myintarweb
2025-09-19 14:49:27
UTC ·
(1 year ago)
52.204.92.232 - - [21/Aug/2025:05:05:00 +0100] 443 "GET /.git/config HTTP/1.1" 404 5243 "-" "Mozilla/5.0 (Linux; Android 9; POT-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"
...
Hacking
Bad Web Bot
Web App Attack
🇫🇷
ecode hosting
2025-08-29 01:12:04
UTC ·
(1 year ago)
Domain : solpro-com.uk
Rule : config
2025-08-21 06:10:59 10.100.1.20 GET /.git/config - 443 - 52.204.92.232 HTTP/1.1 SonyEricssonK610i/R1CB Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1 - solpro-com.uk 404 8 0 253 212 158 - -
Hacking
SQL Injection
2025-08-21 16:30:42
UTC ·
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇫🇷
ecode hosting
2025-08-21 07:15:02
UTC ·
(1 year ago)
Domain : MailEnable WebMail
Rule : config
2025-08-21 07:14:17 10.100.1.20 GET /.git/config - 443 - 52.204.92.232 Mozilla/5.0 (Macintosh; Intel Mac OS X 1083) AppleWebKit/537.36 (KHTML like Gecko) Chrome/28.0.1469.0 Safari/537.36 - 404 8 0 388 - -
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2025-08-21 07:14:36
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 52.204.92.232 (ec2-52-204-92-232.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 03:14:32.016047 2025] [security2:error] [pid 14653:t ...
show more
(mod_security) mod_security (id:210492) triggered by 52.204.92.232 (ec2-52-204-92-232.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 03:14:32.016047 2025] [security2:error] [pid 14653:tid 14653] [client 52.204.92.232:60154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wizind.com"] [uri "/.git/config"] [unique_id "aKbHWBjbvzsofyC1AwH_qQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-08-21 07:05:08
UTC ·
(1 year ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-08-21 06:54:49
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 52.204.92.232 (ec2-52-204-92-232.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 02:54:45.639019 2025] [security2:error] [pid 12964:t ...
show more
(mod_security) mod_security (id:210492) triggered by 52.204.92.232 (ec2-52-204-92-232.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 02:54:45.639019 2025] [security2:error] [pid 12964:tid 12964] [client 52.204.92.232:36488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web243.dnchosting.com"] [uri "/.git/config"] [unique_id "aKbCtTE-AULHFDfYkMqWnAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-08-21 06:45:17
UTC ·
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇩🇪
ut-addicted.com
2025-08-21 06:42:36
UTC ·
(1 year ago)
\[Thu Aug 21 08:42:35.090628 2025\] \[:error\] \[pid 16478:tid 140572132112128\] \[client 52.204.92.232:45468\] \[client 52.204.92.232\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/loc ...
show more
\[Thu Aug 21 08:42:35.090628 2025\] \[:error\] \[pid 16478:tid 140572132112128\] \[client 52.204.92.232:45468\] \[client 52.204.92.232\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "ut-addicted.com"\] \[uri "/.git/config"\] \[unique_id "aKa-2yZnOwOvV3iscect9QAAAMI"\]
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-08-21 06:34:47
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 52.204.92.232 (ec2-52-204-92-232.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 02:34:39.446020 2025] [security2:error] [pid 30526:t ...
show more
(mod_security) mod_security (id:210492) triggered by 52.204.92.232 (ec2-52-204-92-232.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 02:34:39.446020 2025] [security2:error] [pid 30526:tid 30526] [client 52.204.92.232:52290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thevoodooguru.com"] [uri "/.git/config"] [unique_id "aKa9_3BQWNZDgCivSje5hQAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
advena
2025-08-21 06:30:58
UTC ·
(1 year ago)
52.204.92.232 (AS14618 AMAZON-AES) was intercepted at 2025-08-21T06:19:57Z after violating WAF directive: 23548ee2b36547a1be09bb2c0550c529. Pre-cautionary/corrective action applied: block.
Web Spam
Hacking
Brute-Force
Web App Attack
🇮🇹
LTM
2025-08-21 06:20:01
UTC ·
(1 year ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
CBJ
2025-08-21 06:14:05
UTC ·
(1 year ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
TPI-Abuse
2025-08-21 05:56:03
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 52.204.92.232 (ec2-52-204-92-232.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 01:55:58.481881 2025] [security2:error] [pid 19636:t ...
show more
(mod_security) mod_security (id:210492) triggered by 52.204.92.232 (ec2-52-204-92-232.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 01:55:58.481881 2025] [security2:error] [pid 19636:tid 19636] [client 52.204.92.232:40598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "serviciosdedistribucioncastimpex.com.spyasociados.com"] [uri "/.git/config"] [unique_id "aKa07vKg9QyPSJf3cZKF3gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
GoodOldTOS
2025-08-21 05:49:52
UTC ·
(1 year ago)
Bad keywords detected in request: /.git/config/.git
Web App Attack