🇫🇷
ELYAZ
2026-06-24 07:22:09
(4 days ago)
(y4) Failed scan -byebye- from 45.3.35.4 (US/United States/-): (CF_ENABLE)
Hacking
🇫🇷
Sklurk
2026-06-21 03:10:21
(1 week ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-20 02:33:36
(1 week ago)
Web App Attack
Web App Attack
🇬🇷
setupgr
2026-06-19 09:53:15
(1 week ago)
(mod_security) mod_security (id:900001) triggered by 45.3.35.4 (US/United States/Virginia/Ashburn/-/ ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.35.4 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 12:53:10.751865 2026] [security2:error] [pid 79894:tid 79934] [client 45.3.35.4:53835] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: cpanagiotou.gr"] [severity "CRITICAL"] [tag "security"] [hostname "cpanagiotou.gr"] [uri "/wp-login.php"] [unique_id "ajURhic2acK9dyAMRdLjRQAAAU0"], referer: https://cpanagiotou.gr/wp-login.php
show less
Port Scan
🇺🇸
lostswordfish.com
2026-06-19 07:10:05
(1 week ago)
Wordfence waf block on restore georgia
Web App Attack
🇬🇷
setupgr
2026-06-18 23:55:44
(1 week ago)
(mod_security) mod_security (id:900001) triggered by 45.3.35.4 (US/United States/Virginia/Ashburn/-/ ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.35.4 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 02:55:41.173719 2026] [security2:error] [pid 2284:tid 2474] [client 45.3.35.4:31829] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: babis.photo"] [severity "CRITICAL"] [tag "security"] [hostname "babis.photo"] [uri "/wp-login.php"] [unique_id "ajSFfbCXX3cFyBc7x7QVYQAAAMY"], referer: https://babis.photo/wp-login.php
show less
Port Scan
🇫🇷
ELYAZ
2026-06-16 05:24:45
(1 week ago)
(y4) Failed scan -byebye- from 45.3.35.4 (US/United States/-): (CF_ENABLE)
Hacking
🇺🇸
TPI-Abuse
2026-02-19 05:00:56
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:00:49.283705 2026] [security2:error] [pid 16520:tid 16520] [client 45.3.35.4:47105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koreagreenrecycling.com"] [uri "/app/.git/config"] [unique_id "aZaZAdy8yUf8XtRUnCAwgAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 03:04:44
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:04:37.395270 2026] [security2:error] [pid 28730:tid 28730] [client 45.3.35.4:63697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentuckianacordcutters.com"] [uri "/backend/.env"] [unique_id "aZZ9xb_GuWxU30IZ9Gt0FQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 20:06:59
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 15:06:51.739511 2026] [security2:error] [pid 5544:tid 5544] [client 45.3.35.4:15545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tradersworldmarket.com"] [uri "/.env.local"] [unique_id "aZYb22kvwY15ksrGFJvNpQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:41:18
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:41:13.680497 2026] [security2:error] [pid 1952:tid 1952] [client 45.3.35.4:42771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thinksite.net"] [uri "/api/.env"] [unique_id "aZYHyXSH8N3R5nGSLS8vGAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:23:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:23:40.573592 2026] [security2:error] [pid 18674:tid 18674] [client 45.3.35.4:64133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thetallships.com"] [uri "/backup/.git/config"] [unique_id "aZYDrB-sUY-bdYYHHQrN6QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 17:28:46
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 12:28:38.442697 2026] [security2:error] [pid 1935:tid 1935] [client 45.3.35.4:37191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zodiacwin.com"] [uri "/backup/.git/config"] [unique_id "aZX2xrQ3gvXCTuEerbohaQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 16:45:29
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.35.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 11:45:23.659006 2026] [security2:error] [pid 15109:tid 15109] [client 45.3.35.4:46469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yvonnebraden.com"] [uri "/.env"] [unique_id "aZXso95imEeehnLmEbkN6gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-18 16:06:37
(4 months ago)
Scanning/Probing (16)
Brute-Force
Web App Attack