🇺🇸
TPI-Abuse
2026-11-06 08:18:54
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 93.157.29.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:18:46.384679 2026] [security2:error] [pid 5177:tid 5177] [client 93.157.29.151:59737] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 93.157.29.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:18:46.384679 2026] [security2:error] [pid 5177:tid 5177] [client 93.157.29.151:59737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sydneysue.com"] [uri "/.git/HEAD"] [unique_id "au2NZkzd2wQOAU8KUWC5UQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
throny
2026-11-03 02:08:32
UTC ·
(3 days ago)
Used an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-03 02:07 UTC, API call GetSendQuota, client aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-202-generic md/arch#x86_64 lang/python#3.13.11 md/p ...
show more
Used an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-03 02:07 UTC, API call GetSendQuota, client aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-202-generic md/arch#x86_64 lang/python#3.13.11 md/pyimpl#CPython
show less
Hacking
Web App Attack
🇿🇦
conure.sh
2026-11-01 12:12:32
UTC ·
(5 days ago)
csagent: score 20.0: secrets grab x2; 2 domain(s) in 0s
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:35:28
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 93.157.29.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:35:23.471232 2026] [security2:error] [pid 10955:tid 10955] [client 93.157.29.151:59529] M ...
show more
(mod_security) mod_security (id:210492) triggered by 93.157.29.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:35:23.471232 2026] [security2:error] [pid 10955:tid 10955] [client 93.157.29.151:59529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mapleleaf-marketing.com"] [uri "/.git/HEAD"] [unique_id "atKmqww2-t4XuVd2piISyAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 12:16:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 93.157.29.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:16:29.815610 2026] [security2:error] [pid 20313:tid 20313] [client 93.157.29.151:40841] M ...
show more
(mod_security) mod_security (id:210492) triggered by 93.157.29.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:16:29.815610 2026] [security2:error] [pid 20313:tid 20313] [client 93.157.29.151:40841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lendren.com"] [uri "/.git/HEAD"] [unique_id "as9ynRggacLMrgLqaGVxVQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 17:17:37
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 93.157.29.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 13:17:33.063709 2026] [security2:error] [pid 8285:tid 8285] [client 93.157.29.151:34225] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 93.157.29.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 13:17:33.063709 2026] [security2:error] [pid 8285:tid 8285] [client 93.157.29.151:34225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinkycouple4u.com"] [uri "/.git/HEAD"] [unique_id "as0WLRyBefvezrCTH13aagAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-18 17:10:55
UTC ·
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /config.php | 2026-09-18 17:10 UTC
Bad Web Bot
2026-08-04 11:12:49
UTC ·
(3 months ago)
FortiWeb WAF: 22 attacks detected. Threat Score: 10776180. Types: Client Management(11), Signature Detection(11). Origin: United States.
Web App Attack
🇳🇱
exxos
2025-09-26 07:03:01
UTC ·
(1 year ago)
http-no-verb
Hacking
🇺🇸
Psycho Solutions LLC
2025-04-04 15:30:33
UTC ·
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/4/2025 3:30 pm (UTC-6)
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇦🇺
oncord
2025-01-13 02:23:53
UTC ·
(1 year ago)
Form spam
Web Spam
2024-10-31 10:35:23
UTC ·
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
