🇺🇸
TPI-Abuse
2026-02-11 17:13:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 12:13:15.802120 2026] [security2:error] [pid 19113:tid 19113] [client 45.3.46.212:11273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquatech-ind.com"] [uri "/app/.env"] [unique_id "aYy4q8AVkud89FEmvExhlgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2026-02-11 04:52:55
(3 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env.staging (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env.staging]
show less
Hacking
Web App Attack
2026-02-11 04:31:19
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-02-10 19:34:41
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 14:34:27.830505 2026] [security2:error] [pid 28107:tid 28107] [client 45.3.46.212:22443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aperturecontrols.com"] [uri "/api/.env"] [unique_id "aYuIQyL5e2FOEudgVRWiCwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ParaBug
2026-02-10 15:32:29
(3 months ago)
45.3.46.212 - - [10/Feb/2026:16:32:28 +0100] "GET /app/.env HTTP/1.1" 301 3350 "-" "Mozilla/5.0 (Win ...
show more
45.3.46.212 - - [10/Feb/2026:16:32:28 +0100] "GET /app/.env HTTP/1.1" 301 3350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Phishing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:34:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:34:54.792894 2026] [security2:error] [pid 19302:tid 19302] [client 45.3.46.212:54519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icwcruisersguide.com"] [uri "/test/.git/config"] [unique_id "aYq1btwy1XwBdRCeMP64owAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:23:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:22:55.067810 2026] [security2:error] [pid 20784:tid 20784] [client 45.3.46.212:54513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iamnotguilty.com"] [uri "/app/.git/config"] [unique_id "aYqkjxvJX-gq8qzdN0chkAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 19:45:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:45:14.441493 2026] [security2:error] [pid 21412:tid 21412] [client 45.3.46.212:14415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homebuyerpros.com"] [uri "/backend/.env"] [unique_id "aYo5SsqBY2MJ_eevhimfQgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 11:32:28
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2026-01-05 20:24:24
(4 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
OceanTreasure
2025-12-10 10:55:18
(5 months ago)
tcp/443; AWS credentials file access attempt: "GET /.aws/credentials" @ 2025-12-10T10:51:00Z [proxy]
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 12:58:06
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 07:57:59.031689 2025] [security2:error] [pid 16442:tid 16442] [client 45.3.46.212:43041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cnprsalestraining.com"] [uri "/.svn/wc.db"] [unique_id "aTgc1yo2ek6Kh206xdc2FwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-08 15:58:47
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-07 14:32:49
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:32:46.576480 2025] [security2:error] [pid 412:tid 412] [client 45.3.46.212:16269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perron.org"] [uri "/.git/HEAD"] [unique_id "aTWQDmSyX5WpOdLh10X_SwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 17:27:07
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 12:26:59.974618 2025] [security2:error] [pid 25405:tid 25405] [client 45.3.46.212:58961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "curts.net"] [uri "/.svn/wc.db"] [unique_id "aTRnY2cluLYCtE55swBf1AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack