🇩🇪
grassau.com
2026-07-29 09:06:21
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 56.155.144.42 (JP/Japan/Osaka/Osaka/ec2 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 56.155.144.42 (JP/Japan/Osaka/Osaka/ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com)
show less
SQL Injection
2026-07-29 08:25:45
(3 days ago)
Automated Apache suspicious-path probe detected in last 15m: hits=191; wp-login_hits=0; url=/api/sta ...
show more
Automated Apache suspicious-path probe detected in last 15m: hits=191; wp-login_hits=0; url=/api/staging/.env|/vendor/.env|/uploads/.env|/lib/.env|/resources/.env|/assets/.env|/tools/.env|/internal/.env|(+182 more)
show less
Web App Attack
🇮🇹
VHosting
2026-07-29 07:50:04
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 11:16:50
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3 ...
show more
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 07:16:44.737136 2026] [security2:error] [pid 1701:tid 1701] [client 56.155.144.42:47142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.steve-subrina.michaelsabbey.org"] [uri "/.env"] [unique_id "adJEnDHURGiCPfom7lAoigAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 10:09:03
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3 ...
show more
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 06:08:57.693547 2026] [security2:error] [pid 17399:tid 17399] [client 56.155.144.42:40672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stephenshouse.org.dougscomputers.com"] [uri "/.env"] [unique_id "adI0uY17P98O6AblKRDg0gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 09:48:36
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3 ...
show more
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:48:29.796586 2026] [security2:error] [pid 12928:tid 12937] [client 56.155.144.42:42292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stephanie.stauffer.name.sjstauffer.com"] [uri "/.env"] [unique_id "adIv7Q3wX_oKdhsRn9L1qwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-04-05 09:42:21
(3 months ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-04-05 09:10:59
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3 ...
show more
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 05:10:52.703928 2026] [security2:error] [pid 5456:tid 5456] [client 56.155.144.42:58914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stellwagenmusic.com.jimgrenier.com"] [uri "/.env"] [unique_id "adInHGjt6fQufMR_Z_u5igAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-29 23:04:46
(8 months ago)
Auto-ban: >3000 req/min op 2025-11-29
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-29 20:15:29
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3 ...
show more
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 15:15:25.940523 2025] [security2:error] [pid 21739:tid 21739] [client 56.155.144.42:47628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eclipsesoftware.andrew.weigel.name"] [uri "/.git/config"] [unique_id "aStUXbcC4wifyctjdYRpsQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-29 20:07:34
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-11-29 19:10:01
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3 ...
show more
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 14:09:56.107924 2025] [security2:error] [pid 685918:tid 685937] [client 56.155.144.42:39968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eceinal.com"] [uri "/.git/config"] [unique_id "aStFBB6mwCCsg2EMPaZDLwAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
WebNiraj
2025-11-29 18:56:21
(8 months ago)
(mod_security) mod_security (id:949110) triggered by 56.155.144.42 (JP/Japan/ec2-56-155-144-42.ap-no ...
show more
(mod_security) mod_security (id:949110) triggered by 56.155.144.42 (JP/Japan/ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com): 5 in the last 3600 secs [ZETA]
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-11-29 13:30:26
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3 ...
show more
(mod_security) mod_security (id:210492) triggered by 56.155.144.42 (ec2-56-155-144-42.ap-northeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 08:30:19.998856 2025] [security2:error] [pid 13514:tid 13514] [client 56.155.144.42:46202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eatcakecup.com"] [uri "/.git/config"] [unique_id "aSr1a-iq8Era0VribvRGzQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack