๐จ๐ญ
4server
2026-05-12 17:37:20
(3 weeks ago)
[TueMay1219:37:15.9917052026][security2:error][pid2870990:tid2871166][client45.3.51.59:0]ModSecurity ...
show more
[TueMay1219:37:15.9917052026][security2:error][pid2870990:tid2871166][client45.3.51.59:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".svn\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"distributori-sigarette-ticino.ch\"][uri\"/.svn/wc.db\"][unique_id\"agNlS-5LObcKq0OkX8TWIAAAAFA\"]
show less
Hacking
Web App Attack
๐ฉ๐ช
4server
2026-05-11 04:32:09
(3 weeks ago)
[MonMay1106:32:03.5686092026][security2:error][pid1984168:tid1984299][client45.3.51.59:0]ModSecurity ...
show more
[MonMay1106:32:03.5686092026][security2:error][pid1984168:tid1984299][client45.3.51.59:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"bicycleambulance.ch\"][uri\"/.git/HEAD\"][unique_id\"agFbw5dNLDsI7oheqmewHgAAARE\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฉ๐ช
LRob.fr
2026-04-29 01:45:06
(1 month ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
Anonymous
2026-04-12 05:58:59
(1 month ago)
Attempt to scan vulnerabilities
Hacking
๐ง๐ช
voormedia
2026-03-20 04:50:39
(2 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
Anonymous
2025-12-11 05:05:31
(5 months ago)
botnet
DDoS Attack
๐บ๐ธ
TPI-Abuse
2025-11-26 09:41:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:41:02.397729 2025] [security2:error] [pid 32083:tid 32107] [client 45.3.51.59:43821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jpdesign.us"] [uri "/.git/HEAD"] [unique_id "aSbLLkswSQfOe5OvGk0mAgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-26 06:01:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:00:57.329205 2025] [security2:error] [pid 11228:tid 11228] [client 45.3.51.59:49475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.firstamericanind.com"] [uri "/.svn/wc.db"] [unique_id "aSaXmTg4UxBduecN0j08PAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-26 05:24:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:24:51.164940 2025] [security2:error] [pid 29065:tid 29065] [client 45.3.51.59:47063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.directnic-support.rocks"] [uri "/.git/HEAD"] [unique_id "aSaPI9m3PAcrk8OpWASM8wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-26 02:35:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:35:25.668766 2025] [security2:error] [pid 25130:tid 25130] [client 45.3.51.59:12213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.harrygant.com"] [uri "/.git/HEAD"] [unique_id "aSZnbf6xksOOtM8rZ9o60gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-26 00:56:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:56:47.904768 2025] [security2:error] [pid 1075:tid 1075] [client 45.3.51.59:48827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.coretherapyassoc.com"] [uri "/.svn/wc.db"] [unique_id "aSZQT4Y3h_0qSTqu9ZmuJgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-25 20:35:45
(6 months ago)
botnet
DDoS Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 06:29:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:43.687076 2025] [security2:error] [pid 10902:tid 10902] [client 45.3.51.59:17137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wendeenicole.com"] [uri "/.git/HEAD"] [unique_id "aSP7V-UWNOhDEYlpovH3ugAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 00:37:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:16:22.045036 2025] [security2:error] [pid 1524:tid 1524] [client 45.3.51.59:30815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.donbullis.com"] [uri "/.env"] [unique_id "aSOj1sgU9qNYUR1Kmg15igAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-14 01:54:50
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack