🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇬🇧
findlab
2025-12-22 02:50:11
(5 months ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:50:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:50:29.252048 2025] [security2:error] [pid 12103:tid 12140] [client 45.3.42.76:57023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dwa.evan-hotel.com"] [uri "/.env"] [unique_id "aSQANed3pxroRSWDTtpYWQAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:31:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:30:19.572119 2025] [security2:error] [pid 19777:tid 19777] [client 45.3.42.76:59177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mike.bickley.name"] [uri "/.svn/wc.db"] [unique_id "aSP7ezbntmbnPt0ijLEAAwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:15:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:15:05.551174 2025] [security2:error] [pid 514:tid 514] [client 45.3.42.76:52789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.proinsaca.com"] [uri "/.git/HEAD"] [unique_id "aSP36d9CYESMdqiIoBS1VgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 03:23:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:23:14.772861 2025] [security2:error] [pid 9559:tid 9559] [client 45.3.42.76:21873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestrestaurants.com"] [uri "/.svn/wc.db"] [unique_id "aSPPoqXZzba0pPqPtVlpiQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 02:26:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:26:46.364724 2025] [security2:error] [pid 7145:tid 7145] [client 45.3.42.76:13687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hk.handyrehab.com"] [uri "/.svn/wc.db"] [unique_id "aSPCZhuA9278TrANn_qNDwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
clapper
2025-11-16 16:16:28
(6 months ago)
(mod_security) mod_security (id:949110) triggered by 45.3.42.76 (GB/United Kingdom/-): 3 in the last ...
show more
(mod_security) mod_security (id:949110) triggered by 45.3.42.76 (GB/United Kingdom/-): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
🇩🇪
ps-center
2025-10-18 18:10:38
(7 months ago)
C1-W: TCP-Scanner. Port: 22
Port Scan
🇦🇺
oncord
2025-10-18 00:54:44
(7 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-10-12 09:04:59
(7 months ago)
Form spam
Web Spam
🇬🇧
SilverZippo
2025-04-08 01:44:07
(1 year ago)
Web App Attack
Web App Attack
🇦🇺
MAGIC
2025-03-26 00:21:18
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇬🇧
findlab
2025-03-22 08:10:08
(1 year ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇧🇷
hostseries
2025-03-10 00:00:00
(1 year ago)
Brute-force cPanel Services
Brute-Force