🇩🇪
Lino Project
2026-11-15 17:55:14
UTC ·
(9 minutes ago)
54.80.119.23 - - [15/Nov/2026:18:55:10 +0100] "GET /.git/config HTTP/1.1" 302 861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-15 17:30:03
UTC ·
(34 minutes ago)
csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 2s
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-15 17:10:19
UTC ·
(54 minutes ago)
(modsec_attack) srv101 ModSecurity attack 54.80.119.23 (US/United States/ec2-54-80-119-23.compute-1.amazonaws.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇳🇱
Alt255
2026-11-15 17:04:05
UTC ·
(1 hour ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 54.80.119.23 - - [15/Nov/2026:18:03:59 +0100] "GET /.git/config HTTP/2.0" 404 14635 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 54.80.119.23 - - [15/Nov/2026:18:03:59 +0100] "GET /.git/config HTTP/2.0" 404 14635 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 16:31:14
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 54.80.119.23 (ec2-54-80-119-23.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:31:09.059589 2026] [security2:error] [pid 27842:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 54.80.119.23 (ec2-54-80-119-23.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:31:09.059589 2026] [security2:error] [pid 27842:tid 27842] [client 54.80.119.23:55224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.scc1.us"] [uri "/.git/config"] [unique_id "avneTRo1JJFQ_g2cRpWxvgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 16:08:24
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 54.80.119.23 (ec2-54-80-119-23.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:08:21.011012 2026] [security2:error] [pid 14601:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 54.80.119.23 (ec2-54-80-119-23.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:08:21.011012 2026] [security2:error] [pid 14601:tid 14601] [client 54.80.119.23:54658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sanmarinoresidentagent.com"] [uri "/.git/config"] [unique_id "avnY9XHZ5A0EdjA-f4P9FAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 15:31:42
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 54.80.119.23 (ec2-54-80-119-23.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:31:34.826215 2026] [security2:error] [pid 15232:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 54.80.119.23 (ec2-54-80-119-23.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:31:34.826215 2026] [security2:error] [pid 15232:tid 15232] [client 54.80.119.23:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.saadehcomputers.com"] [uri "/.git/config"] [unique_id "avnQVrEprWtPi6xLX24u_QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-11-15 15:27:02
UTC ·
(2 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 14:44:46
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 54.80.119.23 (ec2-54-80-119-23.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:44:42.633563 2026] [security2:error] [pid 24111:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 54.80.119.23 (ec2-54-80-119-23.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 09:44:42.633563 2026] [security2:error] [pid 24111:tid 24111] [client 54.80.119.23:51146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.robtown.com"] [uri "/.git/config"] [unique_id "avnFWhe_A-atAlQy9xbwjgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
ciccio diddo
2026-11-15 14:20:46
UTC ·
(3 hours ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-11-15 09:35:04
UTC ·
(8 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
