🇱🇻
garmtech.com
2026-01-13 15:41:15
(5 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇮🇩
BPS-StatisticsIndonesia
2025-12-29 00:17:53
(5 months ago)
WP Login Scan Activities
Web App Attack
🇧🇪
voormedia
2025-12-04 20:23:27
(6 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:22:35
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:22:27.977876 2025] [security2:error] [pid 1246:tid 1246] [client 154.213.163.244:50823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cajunpicasso.com"] [uri "/.env"] [unique_id "aSa4w0Rpitj48n_0fM3cwgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:21:14
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:21:08.273795 2025] [security2:error] [pid 1041:tid 1041] [client 154.213.163.244:20181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.asurprisinglittletown.com"] [uri "/.env"] [unique_id "aSZyJHgjAafnqC5y0F6ssAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:07:16
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:07:12.842010 2025] [security2:error] [pid 5921:tid 5921] [client 154.213.163.244:49893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.opticasprisma.com"] [uri "/.git/HEAD"] [unique_id "aSZEsPaAsNXH1CuCoQLwygAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-24 23:03:32
(7 months ago)
Auto-ban: >3000 req/min op 2025-11-24
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-24 09:25:56
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:25:48.000052 2025] [security2:error] [pid 22866:tid 22866] [client 154.213.163.244:19395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cipcug.org"] [uri "/.git/HEAD"] [unique_id "aSQkm1ktxkc3xrYQLpeQIgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:00:28
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:00:17.921308 2025] [security2:error] [pid 3746398:tid 3746398] [client 154.213.163.244:38897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.interculturaldimensions.org"] [uri "/.git/HEAD"] [unique_id "aSQeoSOe3FaPLaOuuiYgywAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:29:34
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:29:27.648645 2025] [security2:error] [pid 27798:tid 27798] [client 154.213.163.244:48993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cliniquecavalancia.com"] [uri "/.env"] [unique_id "aSQXZ2Djd_24ghLEkisOIwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:20:25
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:20:04.545251 2025] [security2:error] [pid 13905:tid 13913] [client 154.213.163.244:45491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ouye.net"] [uri "/.svn/wc.db"] [unique_id "aSQHJDRsdwrIavQhxEL01AAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:59:56
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:59:52.547262 2025] [security2:error] [pid 12103:tid 12144] [client 154.213.163.244:9755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wedgwoodclub.com"] [uri "/.git/HEAD"] [unique_id "aSQCaOd3pxroRSWDTtpc6AAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:03:45
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:03:33.757338 2025] [security2:error] [pid 471:tid 471] [client 154.213.163.244:55877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.propertygalleria.com"] [uri "/.git/HEAD"] [unique_id "aSPnJd6Tw-VwkhuLFx8J4QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:30:35
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:30:14.772584 2025] [security2:error] [pid 14564:tid 14564] [client 154.213.163.244:56063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ctjcisenate.org"] [uri "/.env"] [unique_id "aSPfVpyRKGyI1JWyv3NelwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-23 12:34:16
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 154.213.163.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 07:34:09.105351 2025] [security2:error] [pid 24265:tid 24265] [client 154.213.163.244:44355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.futurbike.it"] [uri "/.env"] [unique_id "aSL_QQnWosyL0p-cSPOPdAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack