🇺🇸
fbarela
2026-08-25 17:00:18
(1 week ago)
FortiGate SSL VPN login failures.
Brute-Force
Hacking
🇧🇪
cmbplf
2026-06-12 11:40:32
(2 months ago)
2.490 requests with url.path //xmlrpc.php
1.813 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-06 19:42:16
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 15:41:53.942420 2026] [security2:error] [pid 10334:tid 10334] [client 45.3.39.94:28791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.trafficstopper.com"] [uri "/.env"] [unique_id "aiR4AZpaHabD_cPVktdv2wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(5 months ago)
"DDoS against public endpoint"
DDoS Attack
2025-12-30 01:47:42
(8 months ago)
2025-12-30T03:47:42.624096+02:00 zanati wp(www.sahpa.co.za)[594277]: Blocked authentication attempt ...
show more
2025-12-30T03:47:42.624096+02:00 zanati wp(www.sahpa.co.za)[594277]: Blocked authentication attempt for [email protected] from 45.3.39.94
...
show less
Web App Attack
2025-12-22 18:36:21
(8 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 20:24:37
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 15:24:34.498047 2025] [security2:error] [pid 19419:tid 19419] [client 45.3.39.94:40681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saltyrootsyogaco.com"] [uri "/.git/HEAD"] [unique_id "aTiFgs8YEEqIwjiIdMEtXAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 02:00:44
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 21:00:38.975658 2025] [security2:error] [pid 2562:tid 2562] [client 45.3.39.94:26405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fruitsinthedesert.com"] [uri "/.svn/wc.db"] [unique_id "aTeCxqE4OWti2tUT-CGM-gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 04:10:31
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 23:10:28.235953 2025] [security2:error] [pid 4690:tid 4690] [client 45.3.39.94:51313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanureport.com"] [uri "/.git/HEAD"] [unique_id "aTZPtAGRa93JkP71Q5pULQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 01:17:15
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:17:08.590056 2025] [security2:error] [pid 29185:tid 29197] [client 45.3.39.94:56453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ginefra.com"] [uri "/.svn/wc.db"] [unique_id "aTYnFF5uOw4Rt_ZAP1E_0AAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 15:41:39
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:41:36.061174 2025] [security2:error] [pid 16209:tid 16209] [client 45.3.39.94:35231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wevfc.org"] [uri "/.svn/wc.db"] [unique_id "aTWgMJp1jFX6t65g1B0dVQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 13:18:50
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 08:18:45.826258 2025] [security2:error] [pid 31816:tid 31816] [client 45.3.39.94:51003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "network22.net"] [uri "/.env"] [unique_id "aTQtNQpcrs6D_n9Ah6X86wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 11:17:33
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:17:26.397167 2025] [security2:error] [pid 3849:tid 3849] [client 45.3.39.94:48441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "studiopilates.net"] [uri "/.svn/wc.db"] [unique_id "aTQQxtpHSn3856ZXYK3P4gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:37:36
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:37:29.121313 2025] [security2:error] [pid 24295:tid 24295] [client 45.3.39.94:14609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "musicalmuses.com"] [uri "/.svn/wc.db"] [unique_id "aTK16YDwpuxMP-had9CcNAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:10:09
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:10:03.899769 2025] [security2:error] [pid 15128:tid 15149] [client 45.3.39.94:39319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgementz.com"] [uri "/.git/HEAD"] [unique_id "aTKve4c3ovoV1rwC6C2tewAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack