🇺🇦
st-secure-team
2026-08-03 08:14:01
(3 weeks ago)
Плохой бот. Зафиксированы: фейковый User-Agent (выдаёт себя за браузер), сканирование, перебор, брут ...
show more
Плохой бот. Зафиксированы: фейковый User-Agent (выдаёт себя за браузер), сканирование, перебор, брутфорс, обращение к /ip.php, /robots.txt, поиск уязвимостей. Заблокирован на нашем сайте.
show less
Bad Web Bot
🇩🇪
st-secure-team
2026-07-28 22:19:00
(4 weeks ago)
Поиск файлов конфигурации.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 06:01:48
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 02:01:42.988724 2026] [security2:error] [pid 2576991:tid 2576991] [client 54.169.42.30:60834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonworkshopwest.com"] [uri "/.git/config"] [unique_id "amhFxo_W5dv8MxvHuPlL6AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 19:47:57
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:47:49.361782 2026] [security2:error] [pid 23135:tid 23152] [client 54.169.42.30:40962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.dobairrosuites.com"] [uri "/.git/config"] [unique_id "ame15ZbWjPH1bo6pUq8PvwAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-27 15:57:15
(4 weeks ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/.g ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
🇩🇪
R.G.
2026-07-27 14:13:00
(4 weeks ago)
(ScanningForFiles) Scanning for files triggerd 54.169.42.30 (SG/Singapore/ec2-54-169-42-30.ap-southe ...
show more
(ScanningForFiles) Scanning for files triggerd 54.169.42.30 (SG/Singapore/ec2-54-169-42-30.ap-southeast-1.compute.amazonaws.com): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Mangelot Hosting
2026-07-27 11:39:28
(4 weeks ago)
(modsecurity) srv102 ModSecurity 54.169.42.30 (SG/Singapore/ec2-54-169-42-30.ap-southeast-1.compute. ...
show more
(modsecurity) srv102 ModSecurity 54.169.42.30 (SG/Singapore/ec2-54-169-42-30.ap-southeast-1.compute.amazonaws.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇸🇪
vaia.cloud
2026-07-26 05:35:01
(1 month ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-25 21:59:23
(1 month ago)
Auto-ban: >3000 req/min op 2026-07-25
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-07-25 14:08:05
(1 month ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-07-25 09:57:42
(1 month ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-07-24 05:23:56
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:23:52.599108 2026] [security2:error] [pid 224286:tid 224307] [client 54.169.42.30:41762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stewardship360.com"] [uri "/.git/config"] [unique_id "amL26NsvdZjN81JHpqXqJgAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 05:06:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:06:25.045184 2026] [security2:error] [pid 1655992:tid 1655992] [client 54.169.42.30:38394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steveyett.com"] [uri "/.git/config"] [unique_id "amLy0S9S3aOT0vOCfRFdkgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 04:39:48
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 54.169.42.30 (ec2-54-169-42-30.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:39:43.099074 2026] [security2:error] [pid 3742138:tid 3742138] [client 54.169.42.30:45186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stevescottcoaching.com"] [uri "/.git/config"] [unique_id "amLsj-vcTRtTPeJHvc4pmwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-07-24 04:34:38
(1 month ago)
Scraping with a high error ratio and request rate
Bad Web Bot