2026-04-08 08:42:17
(2 months ago)
Forum/form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
2026-03-05 08:53:37
(3 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-18 03:48:52
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:48:44.719139 2026] [security2:error] [pid 6457:tid 6457] [client 45.3.50.117:12357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertmcatee.com"] [uri "/dev/.git/config"] [unique_id "aZU2nJKDNYVGeCY21vStlgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 02:31:39
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:31:35.468309 2026] [security2:error] [pid 25722:tid 25722] [client 45.3.50.117:13185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rentalmgt.com"] [uri "/.env.save"] [unique_id "aZUkh4RQ5r2E_V-U2w-fbwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 01:08:17
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 20:08:12.541396 2026] [security2:error] [pid 25272:tid 25324] [client 45.3.50.117:22749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peapage.com"] [uri "/.env.local"] [unique_id "aZUQ_Bz61016AFeZczthewAAAYg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-17 23:33:07
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 18:33:04.681401 2026] [security2:error] [pid 28805:tid 28805] [client 45.3.50.117:42935] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||portraitsinblues.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "portraitsinblues.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZT6sCijcL0ukXfdxFymKwAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-03 15:36:33
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-28 20:10:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:10:47.933527 2025] [security2:error] [pid 13518:tid 13518] [client 45.3.50.117:12139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aares2026.net"] [uri "/.env"] [unique_id "aSoBx7Pn1jYuBfvI36iASwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2025-11-28 14:47:04
(6 months ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 06:41:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 01:41:39.840854 2025] [security2:error] [pid 21130:tid 21130] [client 45.3.50.117:38863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "altered-egos.com"] [uri "/.env"] [unique_id "aSlEI4nu5zgFmesz07_1vAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:48:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:48:47.445776 2025] [security2:error] [pid 16014:tid 16014] [client 45.3.50.117:27901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medicare.waggonerfinancial.com"] [uri "/.git/HEAD"] [unique_id "aSZ4n0zIUpjZrDFB-wSX2gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:28:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:28:05.782303 2025] [security2:error] [pid 6854:tid 6854] [client 45.3.50.117:13237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lasertherapyoc.com"] [uri "/.env"] [unique_id "aSZXpUnueferwisFj0UsMQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:21:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.50.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:20:53.218279 2025] [security2:error] [pid 7511:tid 7511] [client 45.3.50.117:32373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.serconpri.com"] [uri "/.env"] [unique_id "aSUgldTDwEl6Yh1Qqh-bNwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-24 13:30:09
(6 months ago)
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ...
show more
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing.
show less
Web App Attack