🇨🇦
SSH-Admin
2026-07-27 14:00:05
(12 hours ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-07-27 12:43:25
(13 hours ago)
Probing for Exploits on ns56
Exploited Host
Web App Attack
🇳🇿
Antinson
2026-06-28 05:47:13
(4 weeks ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇩🇪
LRob
2026-06-22 19:18:33
(1 month ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-03-11 20:03:15
(4 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 17:58:35
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 12:58:29.793562 2026] [security2:error] [pid 9013:tid 9013] [client 45.3.43.36:49357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arabou.co"] [uri "/api/.env"] [unique_id "aYzDRfDwSORf3bbTHyWBBAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2026-02-11 04:52:44
(5 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.aws/credentials (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-10 22:59:06
(5 months ago)
Auto-ban: >3000 req/min op 2026-02-10
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-10 18:42:03
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 13:41:57.374309 2026] [security2:error] [pid 5362:tid 5477] [client 45.3.43.36:33931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apada.com"] [uri "/test/.git/config"] [unique_id "aYt79QCx3OMLdkYmGC6uuwAAAlI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
FaB Property Group
2026-02-10 11:45:48
(5 months ago)
Requested file: api/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 05:36:13
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:36:10.152379 2026] [security2:error] [pid 12843:tid 12863] [client 45.3.43.36:23405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koalacogs.com"] [uri "/.env.staging"] [unique_id "aYrDyvA-0hoRFyiKDvyuVAAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:46:22
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:46:17.224221 2026] [security2:error] [pid 14688:tid 14688] [client 45.3.43.36:33473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magnawebinc.com"] [uri "/backend/.env"] [unique_id "aYq4Ged2Q6dsS2tkvzDIWgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:26:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:26:30.937079 2026] [security2:error] [pid 8551:tid 8551] [client 45.3.43.36:21027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ianadolphus.com"] [uri "/admin/.git/config"] [unique_id "aYqlZoU4VsqSdh6A17MimQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:01:39
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:01:27.964261 2026] [security2:error] [pid 16663:tid 16663] [client 45.3.43.36:54815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "i-slim.net"] [uri "/.env.local"] [unique_id "aYqfh-3NqRjyj4JvJYIvJAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:03:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:03:38.606715 2026] [security2:error] [pid 32208:tid 32230] [client 45.3.43.36:28105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kiehnefamily.us"] [uri "/dev/.git/config"] [unique_id "aYqR-jLjGA96x6QIS84WRgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack