🇷🇺
DZBOT
2026-06-12 05:33:45
(1 day ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
Aetherweb Ark
2026-05-07 02:51:18
(1 month ago)
(mod_security) mod_security (id:949110) triggered by 45.3.46.102 (CA/Canada/-): N in the last X secs
Web App Attack
🇨🇭
backslash
2026-02-13 20:00:14
(4 months ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇧🇪
cmbplf
2026-01-01 06:28:19
(5 months ago)
798 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇫🇷
SpaceHost-Server
2025-12-31 23:40:54
(5 months ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:30:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:29:16.560080 2025] [security2:error] [pid 4897:tid 4948] [client 45.3.46.102:9343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blastfuturepress.com"] [uri "/.env"] [unique_id "aSQlbEfBqbeahYtfBrLRRQAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:27:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:27:14.704971 2025] [security2:error] [pid 3839:tid 3839] [client 45.3.46.102:47211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ashwoodsecurity.com"] [uri "/.env"] [unique_id "aSQI0u4dcraXhA1G7gFuzQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:26:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:26:45.356414 2025] [security2:error] [pid 29400:tid 29400] [client 45.3.46.102:9561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.castagnino.com"] [uri "/.env"] [unique_id "aSPslezoHSHPSMpIiZLkBwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:56:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:56:14.091607 2025] [security2:error] [pid 23068:tid 23068] [client 45.3.46.102:58105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bencramer.net"] [uri "/.env"] [unique_id "aSPlbixvIJJwCqQkQi2ZYAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-28 02:13:05
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 22:12:58.882087 2025] [security2:error] [pid 5123:tid 5146] [client 45.3.46.102:11589] [client 45.3.46.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sea2er.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sea2er.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-YFqoT-BLr5piolCAzPcwAAABI"], referer: https://sea2er.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-24 07:02:18
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 24 02:02:11.955501 2025] [security2:error] [pid 1899195:tid 1899195] [client 45.3.46.102:33443] [client 45.3.46.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||polar-design.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "polar-design.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7wZcx7osJR0iFmgrMou6wAAAAU"], referer: https://polar-design.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2024-12-12 11:30:32
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2024-11-24 17:48:02
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.46.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 24 12:47:54.989587 2024] [security2:error] [pid 22214:tid 22214] [client 45.3.46.102:44601] [client 45.3.46.102] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wave94.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wave94.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z0NmylPPl2N5nnnqDR1MQQAAABY"], referer: https://wave94.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2024-10-09 19:46:33
(1 year ago)
Wordpress hacking attempt
Web App Attack