🇫🇷
Sklurk
2026-06-17 05:18:50
(9 hours ago)
Web App Attack
Web App Attack
🇨🇭
backslash
2026-01-24 17:40:04
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-11 03:21:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 22:21:27.382948 2025] [security2:error] [pid 4801:tid 4801] [client 45.3.43.120:44531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhempower.com"] [uri "/.git/HEAD"] [unique_id "aTo4twIFDs7CBb4okyDk6AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 21:55:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 16:55:15.214160 2025] [security2:error] [pid 30524:tid 30524] [client 45.3.43.120:44863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lanuevaley.com"] [uri "/.git/HEAD"] [unique_id "aTX3wzUaixM6i_01cRtfLwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 15:40:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:40:47.287310 2025] [security2:error] [pid 12685:tid 12703] [client 45.3.43.120:50737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wegelin.org"] [uri "/.env"] [unique_id "aTWf_yov_VYxSnNbEHMDAgAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 13:29:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:29:05.080032 2025] [security2:error] [pid 4858:tid 4858] [client 45.3.43.120:26345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hazardrecords.org"] [uri "/.svn/wc.db"] [unique_id "aTWBIcRNoxBufpHsk3MXoQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2025-12-07 04:54:15
(6 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/HEAD (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/HEAD]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 08:51:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 03:51:02.364434 2025] [security2:error] [pid 3000:tid 3000] [client 45.3.43.120:50599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloggersunlimited.com"] [uri "/.svn/wc.db"] [unique_id "aTKc9hZCi4BlFFKSAKDYLAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-02 14:10:51
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 06:46:34
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇫🇷
ingroscart.it
2025-04-05 02:42:26
(1 year ago)
(plesk-panel) Failed plesk-panel login with username [redacted] from 45.3.43.120 (GB/United Kingdom/ ...
show more
(plesk-panel) Failed plesk-panel login with username [redacted] from 45.3.43.120 (GB/United Kingdom/-)
show less
Brute-Force
🇳🇿
Tripwire
2025-03-02 23:36:12
(1 year ago)
Wordpress login attempts
Brute-Force
Web App Attack
2024-11-18 06:20:54
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
🇺🇸
octageeks.com
2024-11-11 05:06:43
(1 year ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2024-10-30 13:34:08
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack