🇩🇪
Reinhard
2026-05-30 08:43:13
(6 days ago)
Software package attack. /wp.sql
Web App Attack
🇩🇪
4server
2026-04-21 02:33:15
(1 month ago)
[TueApr2104:33:11.1224102026][security2:error][pid2428967:tid2428986][client45.3.34.69:0]ModSecurity ...
show more
[TueApr2104:33:11.1224102026][security2:error][pid2428967:tid2428986][client45.3.34.69:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"bno.ch\"][uri\"/db.sql\"][unique_id\"aebh51HR_2-JIdnTJ8TxmwAAAJA\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-04-20 16:39:02
(1 month ago)
"GET http://<domain>.com/database.sql HTTP/1.1"
Hacking
Web App Attack
🇩🇪
Bedios GmbH
2026-04-19 20:51:10
(1 month ago)
SQL backup theft attempt
Hacking
2026-04-14 03:06:25
(1 month ago)
Blocked: Reason='Possible SQL injection activity (254/60 min)'; Requests=254
SQL Injection
🇺🇸
TPI-Abuse
2026-02-22 15:59:56
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 10:59:51.149654 2026] [security2:error] [pid 31311:tid 31445] [client 45.3.34.69:49893] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pamper.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pamper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZsn90ydnvB7yaXOrET4AwAAARY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 21:48:45
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:48:37.188213 2026] [security2:error] [pid 10628:tid 10628] [client 45.3.34.69:10193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garyoneal.com"] [uri "/site/.git/config"] [unique_id "aYpWNUBv7Ym3eoc0ZMx27gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 19:48:13
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:48:06.254321 2026] [security2:error] [pid 717735:tid 717748] [client 45.3.34.69:19035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gafm.org"] [uri "/.git/config"] [unique_id "aYo59le2saaLoPBOZVo64wAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 18:42:16
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:42:07.227740 2026] [security2:error] [pid 32267:tid 32267] [client 45.3.34.69:49997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fwa51.com"] [uri "/app/.env"] [unique_id "aYoqf020rFFY4JiD1PwoCwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 17:59:41
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:59:08.083446 2026] [security2:error] [pid 20104:tid 20104] [client 45.3.34.69:22585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.global"] [uri "/app/.git/config"] [unique_id "aYogbITKUYboaAJ07XVHUgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 11:31:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 06:31:49.016168 2026] [security2:error] [pid 2582:tid 2582] [client 45.3.34.69:49967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galeriedorion.com"] [uri "/.git/config"] [unique_id "aYnFpXfF_31JoW-X53e1gwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 09:54:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 04:54:49.537563 2026] [security2:error] [pid 1386049:tid 1386049] [client 45.3.34.69:61345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabbyspetnanny.com"] [uri "/.git/config"] [unique_id "aYmu6Z46o89O8_K7ShFqKAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2025-12-13 22:55:57
(5 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 06:52:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:52:26.536638 2025] [security2:error] [pid 18160:tid 18160] [client 45.3.34.69:23417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.intersession.net"] [uri "/.git/HEAD"] [unique_id "aSajqtO6lyEyYkypQIyKSAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:05:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:05:14.932679 2025] [security2:error] [pid 12250:tid 12250] [client 45.3.34.69:55965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.srcatshow.com"] [uri "/.git/HEAD"] [unique_id "aSZuaja05a7dLPmaEo_SjAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack