🇺🇸
drewf.ink
2026-08-30 00:53:50
(3 days ago)
[00:53] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[00:53] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇫🇷
Sklurk
2026-07-29 00:11:11
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
webgobe
2026-07-11 19:43:33
(1 month ago)
wew-Joomla User : try to access forms...
Hacking
🇫🇷
Sklurk
2026-06-23 04:00:23
(2 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-16 01:36:30
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
big-cloud.nl
2026-02-12 14:44:54
(6 months ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2025-12-03 03:52:47
(8 months ago)
(mod_security) mod_security (id:210740) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210740) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 22:52:37.030706 2025] [security2:error] [pid 13397:tid 13419] [client 45.3.49.49:37801] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||freeziyadyaghi.info|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "freeziyadyaghi.info"] [uri "/contact.htm/index.php"] [unique_id "aS-0BahboFJtqgFOBY485wAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:54:42
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:54:36.847838 2025] [security2:error] [pid 9606:tid 9668] [client 45.3.49.49:45643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.khalessilaw.com"] [uri "/.env"] [unique_id "aSakLCFyBWeOsnO3zv5OSQAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2025-11-26 05:41:50
(9 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:03:39
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:03:33.902987 2025] [security2:error] [pid 6009:tid 6009] [client 45.3.49.49:20445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.portraitartisans.com"] [uri "/.env"] [unique_id "aSZR5WrwRF0euhE2zoj6qQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:39:56
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:39:51.102589 2025] [security2:error] [pid 22220:tid 22220] [client 45.3.49.49:30451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.naominixon.com"] [uri "/.git/HEAD"] [unique_id "aSZMV_R1hN7q0c7m_cHMwQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:08:55
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:08:49.105226 2025] [security2:error] [pid 22649:tid 22649] [client 45.3.49.49:27731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nolafoodporn.com"] [uri "/.svn/wc.db"] [unique_id "aSZFEau5h44ykZiCzrZMfQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:03:01
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:02:54.509920 2025] [security2:error] [pid 11774:tid 11774] [client 45.3.49.49:54419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.airbagdesigns.com"] [uri "/.git/HEAD"] [unique_id "aSP1DpBlzCM0PjhwW04gXAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:05:15
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:05:08.882858 2025] [security2:error] [pid 25080:tid 25080] [client 45.3.49.49:31151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.emailautomationworkflow.com"] [uri "/.svn/wc.db"] [unique_id "aSPnhEw6vhq9J_8NUi2vaQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 00:42:35
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:16:34.440519 2025] [security2:error] [pid 28047:tid 28047] [client 45.3.49.49:16505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.route66book.com"] [uri "/.git/HEAD"] [unique_id "aSOj4indHyECTZ7XUo872QAAAF0"]
show less
Brute-Force
Bad Web Bot
Web App Attack