🇺🇸
derekgallardo01
2026-07-30 17:16:31
UTC ·
(3 months ago)
Auto-reported by Worker: AiTM toolkit UA fingerprint CRITICAL: auto-add to BadIPS Named Location + report to AbuseIPDB.. Detection: AiTM toolkit UA fingerprint (Tycoon/EvilProxy portal-browser). Blocked at Conditional Access gate.
Brute-Force
Web App Attack
2026-07-30 00:31:25
UTC ·
(3 months ago)
IM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:15
Hacking
🇦🇺
screwlooseit.com.au
2026-07-04 13:06:08
UTC ·
(4 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
NL/Netherlands/-
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 21:07:49
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:07:45.688246 2026] [security2:error] [pid 11358:tid 11369] [client 45.130.202.36:62433] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:07:45.688246 2026] [security2:error] [pid 11358:tid 11369] [client 45.130.202.36:62433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adetnw.com"] [uri "/.env.production"] [unique_id "ai3GoWWJ6EuAsd3pFVDOrAAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 15:15:39
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:15:32.667825 2026] [security2:error] [pid 27869:tid 27869] [client 45.130.202.36:43093] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:15:32.667825 2026] [security2:error] [pid 27869:tid 27869] [client 45.130.202.36:43093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.versacardio.com"] [uri "/.env.production"] [unique_id "ai10FPGlxei5S-l3RqTJIQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
beon
2026-06-13 09:02:00
UTC ·
(5 months ago)
[DateTime=>2026-06-13T09:02:00Z (UTC)] , [HoneyPot_Hit=>once] , [HoneyPot=>/.git/HEAD] , [total_Hit=>once]
Bad Web Bot
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-13 07:26:32
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:26:27.711785 2026] [security2:error] [pid 30277:tid 30282] [client 45.130.202.36:48231] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:26:27.711785 2026] [security2:error] [pid 30277:tid 30282] [client 45.130.202.36:48231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cafeteresemporda.com.webcraftestudio.com"] [uri "/.git/HEAD"] [unique_id "ai0GIxoG3-mILGIPXPjkbgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 06:31:32
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:31:25.571946 2026] [security2:error] [pid 23529:tid 23529] [client 45.130.202.36:21843] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:31:25.571946 2026] [security2:error] [pid 23529:tid 23529] [client 45.130.202.36:21843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.csf-pos.computerservicesofflorida.com"] [uri "/.git/HEAD"] [unique_id "aiz5PcvEugCNyYrzvvG4EAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 18:49:16
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:49:09.020790 2026] [security2:error] [pid 29616:tid 29616] [client 45.130.202.36:42885] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:49:09.020790 2026] [security2:error] [pid 29616:tid 29616] [client 45.130.202.36:42885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiireservations.com.kh6jim.com"] [uri "/.env"] [unique_id "aixUpUo4jknJuak09NOsLwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-06-12 18:20:28
UTC ·
(5 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-12 10:40:55
UTC ·
(5 months ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-12 09:05:25
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:05:19.003728 2026] [security2:error] [pid 5629:tid 5629] [client 45.130.202.36:57877] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:05:19.003728 2026] [security2:error] [pid 5629:tid 5629] [client 45.130.202.36:57877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jamestaylorart.com.ingberinteriors.com"] [uri "/.git/HEAD"] [unique_id "aivLzzi9p6xigtm-XIRYqgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2026-06-12 05:47:58
UTC ·
(5 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇩🇪
YF
2026-06-12 05:00:22
UTC ·
(5 months ago)
Git HEAD exposure probe
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 09:15:47
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 05:15:40.520572 2026] [security2:error] [pid 20890:tid 20890] [client 45.130.202.36:48135] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.202.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 05:15:40.520572 2026] [security2:error] [pid 20890:tid 20890] [client 45.130.202.36:48135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.exoticcarwrap.com"] [uri "/.git/HEAD"] [unique_id "aip8vG0wA6US0kUrk8XkLAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack