Total reports
8 from
6 distinct
reporters
First reported
November 15th 2026
Most recent report
18 minutes ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
🇬🇧
United Kingdom of Great Britain and Northern Ireland
1
🇮🇹
Italy
1
Most common categories
Web App Attack
8
Brute-Force
6
Bad Web Bot
3
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
mnsf
2026-11-15 17:05:13
UTC ·
(18 minutes ago)
Scanning/Probing (31)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 16:58:40
UTC ·
(24 minutes ago)
(mod_security) mod_security (id:210492) triggered by 54.210.153.94 (ec2-54-210-153-94.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:58:34.698499 2026] [security2:error] [pid 2722:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 54.210.153.94 (ec2-54-210-153-94.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:58:34.698499 2026] [security2:error] [pid 2722:tid 2722] [client 54.210.153.94:34734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrizel.com"] [uri "/.git/config"] [unique_id "avnkuuIStwZywhfnllc5GAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 15:46:41
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 54.210.153.94 (ec2-54-210-153-94.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:46:33.932332 2026] [security2:error] [pid 26392:t ...
show more
(mod_security) mod_security (id:210492) triggered by 54.210.153.94 (ec2-54-210-153-94.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:46:33.932332 2026] [security2:error] [pid 26392:tid 26392] [client 54.210.153.94:43112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agreyhawkcampaign.net"] [uri "/.git/config"] [unique_id "avnT2eCnUODgq_d6d7toFgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-15 15:34:51
UTC ·
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Roderic
2026-11-15 14:30:01
UTC ·
(2 hours ago)
Insights: web vulnerability probing, 124 requests on 1 site, e.g. /.git/config (as: Browser via Amazon AWS)
Web App Attack
🇮🇹
VHosting
2026-11-15 14:25:03
UTC ·
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 13:19:47
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 54.210.153.94 (ec2-54-210-153-94.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:19:39.640864 2026] [security2:error] [pid 17090:t ...
show more
(mod_security) mod_security (id:210492) triggered by 54.210.153.94 (ec2-54-210-153-94.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:19:39.640864 2026] [security2:error] [pid 17090:tid 17090] [client 54.210.153.94:57586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agirlwithaguitar.com"] [uri "/.git/config"] [unique_id "avmxa8uXjF3qZvCOQGRGpwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇹
NunoAJAniceto
2026-11-15 10:26:20
UTC ·
(6 hours ago)
Guardman high confidence exploit conviction (score=83)
Brute-Force
Web App Attack
