2026-05-12 20:18:23
(3 weeks ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇨🇭
4server
2026-05-11 09:48:42
(3 weeks ago)
[MonMay1111:48:37.8484462026][security2:error][pid196243:tid196263][client45.3.43.41:0]ModSecurity:A ...
show more
[MonMay1111:48:37.8484462026][security2:error][pid196243:tid196263][client45.3.43.41:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"privilege-service.ch\"][uri\"/.env\"][unique_id\"agGl9TFvM9daY_VAnGoi-QAAAJI\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 00:10:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 19:10:45.882898 2026] [security2:error] [pid 32721:tid 32721] [client 45.3.43.41:51573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aprilparks.com"] [uri "/api/.env"] [unique_id "aYvJBQ4D-vMnNXES2OTndgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-10 22:59:26
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-10
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-10 16:10:30
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:10:22.031930 2026] [security2:error] [pid 29672:tid 29681] [client 45.3.43.41:10355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "12am.us"] [uri "/.env.local"] [unique_id "aYtYbmqmJhIz38r7Ayr3YwAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 06:01:20
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 01:01:12.606371 2026] [security2:error] [pid 16107:tid 16107] [client 45.3.43.41:46613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koidivision.com"] [uri "/wp/.git/config"] [unique_id "aYrJqNUk_OoSx9mcamWTcAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:34:34
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:34:29.522978 2026] [security2:error] [pid 16435:tid 16435] [client 45.3.43.41:21413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icwcruisersguide.com"] [uri "/config/.env"] [unique_id "aYq1VSuoDIpEs68RtQTkkAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:03:38
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:03:33.531054 2026] [security2:error] [pid 6217:tid 6217] [client 45.3.43.41:22387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madrigalscripts.com"] [uri "/.env.staging"] [unique_id "aYqgBWtqRzrJmH-W6W8HtgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 01:58:46
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:58:43.364302 2026] [security2:error] [pid 26918:tid 26918] [client 45.3.43.41:17075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madbanana.com"] [uri "/new/.git/config"] [unique_id "aYqQ04qWjGEeSr2Mm7fSuAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anymous
2026-02-10 00:35:10
(3 months ago)
GET /v2/.git/config HTTP/1.1 403 400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ...
show more
GET /v2/.git/config HTTP/1.1 403 400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 22:43:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:43:49.633634 2026] [security2:error] [pid 32297:tid 32297] [client 45.3.43.41:17683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houston-church-of-god.org"] [uri "/backend/.env"] [unique_id "aYpjJWqyYBQk8M4qgjL-RQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 19:59:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:59:07.355164 2026] [security2:error] [pid 14131:tid 14131] [client 45.3.43.41:35509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homenetserv.com"] [uri "/app/.env"] [unique_id "aYo8i0RM-xyzCYoFHCypTgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-05 20:18:10
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-11-25 07:30:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:29:53.006041 2025] [security2:error] [pid 2027408:tid 2027434] [client 45.3.43.41:13569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.culturallyyours.org"] [uri "/.git/HEAD"] [unique_id "aSVa8X0JlhnQTGLFtsgtEwAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:28:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:28:17.728181 2025] [security2:error] [pid 10747:tid 10768] [client 45.3.43.41:15273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edsonmedia.com"] [uri "/.svn/wc.db"] [unique_id "aSU-cV2GfO2s-Qdwr6d8_gAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack