🇩🇪
Bedios GmbH
2026-06-10 06:16:50
UTC ·
(4 months ago)
SQL backup theft attempt
Hacking
🇩🇪
FeG Deutschland
2026-04-23 23:40:34
UTC ·
(6 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
4server
2026-04-21 13:36:37
UTC ·
(6 months ago)
[TueApr2115:36:35.7076122026][security2:error][pid3025358:tid3025372][client45.3.53.144:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacces ...
show more
[TueApr2115:36:35.7076122026][security2:error][pid3025358:tid3025372][client45.3.53.144:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"eimeko.ch\"][uri\"/backup.sql\"][unique_id\"aed9YxhJ3UcICK2T19yWQAAAAQs\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-04-20 21:47:42
UTC ·
(6 months ago)
"GET http://<domain>.com/mysqldump.sql HTTP/1.1"
Hacking
Web App Attack
🇩🇪
MusicLibrary
2026-04-18 05:48:10
UTC ·
(6 months ago)
Attempted access to sensitive configuration files (.env, .git, etc.)
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-04-06 23:56:39
UTC ·
(7 months ago)
Form spam
Web Spam
🇮🇹
pantanet
2026-02-17 17:56:38
UTC ·
(8 months ago)
Fail2Ban nginx jail: nginx-badbots
Port Scan
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-01-17 04:52:12
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 23:52:05.633376 2026] [security2:error] [pid 7684:tid 7684] [client 45.3.53.144:44639] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 23:52:05.633376 2026] [security2:error] [pid 7684:tid 7684] [client 45.3.53.144:44639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.personalized-holiday-cards.com"] [uri "/.env"] [unique_id "aWsVdaHmyfQ8Z7zZJftzGgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 04:18:21
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 23:18:14.947159 2026] [security2:error] [pid 25478:tid 25478] [client 45.3.53.144:31811] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 23:18:14.947159 2026] [security2:error] [pid 25478:tid 25478] [client 45.3.53.144:31811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.backyardbrickoven.com"] [uri "/.env"] [unique_id "aWsNhiRZsElJdG4LKlZDNQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 03:27:38
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:27:31.583744 2026] [security2:error] [pid 20301:tid 20301] [client 45.3.53.144:28971] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:27:31.583744 2026] [security2:error] [pid 20301:tid 20301] [client 45.3.53.144:28971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srich.com"] [uri "/.env"] [unique_id "aWsBo7H0NcHgERKHbrcdjgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-16 22:30:06
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 17:30:00.601665 2026] [security2:error] [pid 21523:tid 21523] [client 45.3.53.144:44655] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 17:30:00.601665 2026] [security2:error] [pid 21523:tid 21523] [client 45.3.53.144:44655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.tedharris.com"] [uri "/.env"] [unique_id "aWq76E3H3Dj-oO-EeO0MQgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-16 19:20:49
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 14:20:43.068548 2026] [security2:error] [pid 12595:tid 12595] [client 45.3.53.144:50659] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 14:20:43.068548 2026] [security2:error] [pid 12595:tid 12595] [client 45.3.53.144:50659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.teamsewusa.com"] [uri "/.env"] [unique_id "aWqPi6yfquMX7495u0GaEAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-16 02:10:11
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 21:10:05.702316 2026] [security2:error] [pid 22657:tid 22657] [client 45.3.53.144:35589] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 21:10:05.702316 2026] [security2:error] [pid 22657:tid 22657] [client 45.3.53.144:35589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarahgrammer.austingrammer.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aWmd_df9f2Y6_hcuffoqhgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-31 00:59:16
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇬🇧
openstrike.co.uk
2025-12-11 09:16:42
UTC ·
(10 months ago)
9 packets to port 2083
Port Scan
