|
๐ธ๐ช
Juha Jurvanen
|
|
RdpGuard detected brute-force attempt on RD-WEB
|
Brute-Force
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 21:09:02.908401 2026] [security2:error] [pid 10417:tid 10417] [client 45.3.38.2:16139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acmyles.com"] [uri "/.git/config"] [unique_id "aZplPguTZ0u8iPHFOOmmlAAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 21:56:00.572054 2025] [security2:error] [pid 20602:tid 20602] [client 45.3.38.2:60221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "warpedweed.com"] [uri "/.git/HEAD"] [unique_id "aToywPDpJIQDBuZkP0jDuQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 20:48:49.516347 2025] [security2:error] [pid 30931:tid 30931] [client 45.3.38.2:9509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cymbelescircles.com"] [uri "/.env"] [unique_id "aTjRgY_FTE6_CxZaHby31wAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 13:03:51.605286 2025] [security2:error] [pid 24093:tid 24098] [client 45.3.38.2:45887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlasrecordssearch.com"] [uri "/.svn/wc.db"] [unique_id "aThkhy21Qv63ad8vc3HloAAAAEI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 04:57:22.352670 2025] [security2:error] [pid 20818:tid 20818] [client 45.3.38.2:49919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slovenia-boat-registration.com"] [uri "/.git/HEAD"] [unique_id "aTfygi0GoM5sZyg2jDBMkgAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 18:33:37.562863 2025] [security2:error] [pid 10156:tid 10156] [client 45.3.38.2:40535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scatchellsbeefstand.com"] [uri "/.git/HEAD"] [unique_id "aTYO0bWFG9QgpZB5-hi_yAAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
myagent.site
|
|
Blocking for trying to access an exploit file: /.env
|
Hacking
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 08:08:42.152324 2025] [security2:error] [pid 2563:tid 2563] [client 45.3.38.2:19003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elpaco.net"] [uri "/.svn/wc.db"] [unique_id "aTQq2iPf9TX7N86tyU80aQAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:33:48.147944 2025] [security2:error] [pid 11069:tid 11069] [client 45.3.38.2:47897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "multimediaperformances.com"] [uri "/.git/HEAD"] [unique_id "aTK1DOgesdExDmQqapCOkgAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:40:37.752301 2025] [security2:error] [pid 3538474:tid 3538638] [client 45.3.38.2:23497] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.plasticsurgeondenver.aafm.us"] [uri "/.svn/wc.db"] [unique_id "aSaS1V3wcnJA0sU4fUsglgAAAk4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:01:18.630927 2025] [security2:error] [pid 22086:tid 22266] [client 45.3.38.2:59951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.neutrahouse1939.ward-bergerhouse.org"] [uri "/.git/HEAD"] [unique_id "aSZtfhCcVYSuHH558FyP5AAAAMo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:05:13.358871 2025] [security2:error] [pid 11994:tid 11994] [client 45.3.38.2:37719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wastetrack.io"] [uri "/.env"] [unique_id "aSZSSX23Zk3ntA1qe3-s4AAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:04:28.461520 2025] [security2:error] [pid 14739:tid 14739] [client 45.3.38.2:45063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.pharmasalesconnect.com"] [uri "/.env"] [unique_id "aSTyjE_ZeCsI6TVKBRVmIgAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:52:51.383025 2025] [security2:error] [pid 15574:tid 15574] [client 45.3.38.2:32967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.giantfern.com"] [uri "/.svn/wc.db"] [unique_id "aSQc46zri6Ooi7vXZ8PkigAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|