๐ฉ๐ช
Packets-Decreaser.NET
2025-12-29 14:00:57
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
๐บ๐ธ
TPI-Abuse
2025-11-24 09:44:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.10 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:43:58.479632 2025] [security2:error] [pid 3356:tid 3356] [client 45.3.46.10:13979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hoofnwoofusa.com"] [uri "/.svn/wc.db"] [unique_id "aSQo3vfGjUtChSlmwf5URAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 05:30:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.10 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:29:57.265207 2025] [security2:error] [pid 29383:tid 29383] [client 45.3.46.10:32135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afjm.org"] [uri "/.env"] [unique_id "aSPtVWWYwAwp4kSsnD0dBQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 04:38:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.10 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:38:04.215281 2025] [security2:error] [pid 18193:tid 18267] [client 45.3.46.10:48813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dubarch.com"] [uri "/.git/HEAD"] [unique_id "aSPhLJqABul9tZzps9kdcwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 03:47:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.10 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:47:04.475114 2025] [security2:error] [pid 14902:tid 14902] [client 45.3.46.10:42551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "300blockofwarwick.com"] [uri "/.env"] [unique_id "aSPVOLr8YdkINhyw6CPsiQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-21 18:26:19
(6 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/21 12:23:42
Port Scan
Brute-Force
Exploited Host
Web App Attack
๐จ๐ญ
backslash
2025-04-07 10:00:05
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐บ๐ธ
PulseServers
2024-11-10 00:52:19
(1 year ago)
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ...
show more
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1
...
show less
DDoS Attack
Exploited Host
๐บ๐ธ
PulseServers
2024-11-09 03:25:12
(1 year ago)
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ...
show more
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS2
...
show less
DDoS Attack
Exploited Host
๐ฌ๐ง
PulseServers
2024-11-08 00:47:28
(1 year ago)
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ...
show more
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUK2
...
show less
DDoS Attack
Exploited Host
๐บ๐ธ
PulseServers
2024-11-04 05:03:29
(1 year ago)
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ...
show more
Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS2
...
show less
DDoS Attack
Exploited Host
Anonymous
2024-10-18 11:34:21
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
๐บ๐ธ
EarthAsylum
2024-10-10 11:25:26
(1 year ago)
Repeated exploit attempts on WordPress entry points (disallowed remote request blocked)
Brute-Force
Web App Attack