🇺🇸
TPI-Abuse
2026-02-19 02:48:28
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:48:21.409158 2026] [security2:error] [pid 29043:tid 29043] [client 45.3.34.4:64987] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:48:21.409158 2026] [security2:error] [pid 29043:tid 29043] [client 45.3.34.4:64987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keithwillwynne.com"] [uri "/.env.staging"] [unique_id "aZZ59USB5ymZ3UXtk5lcdgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 01:29:21
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:29:17.135047 2026] [security2:error] [pid 14121:tid 14221] [client 45.3.34.4:28339] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:29:17.135047 2026] [security2:error] [pid 14121:tid 14221] [client 45.3.34.4:28339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kandooo.com"] [uri "/.env.save"] [unique_id "aZZnbSBz6hLu1EMeLiyGqAAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 00:02:57
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:02:49.953222 2026] [security2:error] [pid 3110:tid 3110] [client 45.3.34.4:64405] ModSecurity ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:02:49.953222 2026] [security2:error] [pid 3110:tid 3110] [client 45.3.34.4:64405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visanya.com"] [uri "/new/.git/config"] [unique_id "aZZTKbEtB2mYwsyTGlnrbwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 21:11:52
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 16:11:48.944796 2026] [security2:error] [pid 11466:tid 11466] [client 45.3.34.4:15731] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 16:11:48.944796 2026] [security2:error] [pid 11466:tid 11466] [client 45.3.34.4:15731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "turtlehill.org"] [uri "/.env.production"] [unique_id "aZYrFCkIaB0TXXHXldbaCgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:42:35
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:42:27.196390 2026] [security2:error] [pid 4271:tid 4271] [client 45.3.34.4:56271] ModSecurity ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:42:27.196390 2026] [security2:error] [pid 4271:tid 4271] [client 45.3.34.4:56271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thirdplanettechnology.space"] [uri "/.git/config"] [unique_id "aZYIE-X_lAuPaSW06hUNIwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 13:03:48
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 08:03:42.662441 2026] [security2:error] [pid 18871:tid 18871] [client 45.3.34.4:64837] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 08:03:42.662441 2026] [security2:error] [pid 18871:tid 18871] [client 45.3.34.4:64837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whengarbotalks.com"] [uri "/frontend/.env"] [unique_id "aZW4ridhFl6wbg51U7zZbQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 12:20:54
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:20:50.388734 2026] [security2:error] [pid 4038561:tid 4038561] [client 45.3.34.4:56067] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:20:50.388734 2026] [security2:error] [pid 4038561:tid 4038561] [client 45.3.34.4:56067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weathercarib.com"] [uri "/app/.git/config"] [unique_id "aZWuoizRBWm768BHTCfcrgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-22 14:44:21
UTC ·
(10 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-11-14 06:58:31
UTC ·
(11 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-11-02 19:18:32
UTC ·
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 06:54:43
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-11-01 05:23:29
UTC ·
(1 year ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.01 is noted in report timestamp
Hacking
Brute-Force
2025-10-26 04:26:16
UTC ·
(1 year ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.26 is noted in report timestamp
Hacking
Brute-Force
2025-10-22 11:37:11
UTC ·
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.22 is noted in report timestamp
Hacking
Brute-Force
2025-10-21 09:01:10
UTC ·
(1 year ago)
Dictionary attack on Palo Alto GlobalProtect VPN portal (port 443) detected via repeated login failures with varying usernames.
Brute-Force
2025-10-19 07:56:31
UTC ·
(1 year ago)
Attempted brute force login to web vpn 5 time(s); last attempt for 2025.10.19 is noted in report timestamp
Hacking
Brute-Force
