🇫🇷
Sklurk
2026-07-07 16:17:13
(3 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 13:09:00
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:08:51.382223 2026] [security2:error] [pid 5210:tid 5210] [client 45.3.54.167:33573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mikeberro.com"] [uri "/v2/.git/config"] [unique_id "aY8iY6Mci8OY7-GWkgKMpwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:15:57
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:15:50.324544 2026] [security2:error] [pid 9913:tid 9922] [client 45.3.54.167:31089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mensaxes.net"] [uri "/test/.git/config"] [unique_id "aY7dtkfrzG2UnRDZRGFFVgAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 07:03:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:03:34.092629 2026] [security2:error] [pid 19413:tid 19413] [client 45.3.54.167:10803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medics-group.com"] [uri "/.git/config"] [unique_id "aY7MxmkrpOQ3JoJvGQP25QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-13 06:36:04
(4 months ago)
Bot / scanning and/or hacking attempts: GET /app/.git/config HTTP/1.1, GET /.env.save HTTP/1.1, GET ...
show more
Bot / scanning and/or hacking attempts: GET /app/.git/config HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1, GET /new/.git/config HTTP/1.1, GET /wp/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /admin/.git/config HTTP/1.1, HEAD / HTTP/1.1, GET /site/.git/config HTTP/1.1
show less
Hacking
Web App Attack
2026-02-13 06:03:03
(4 months ago)
PSCSERV WPSCAN 45.3.54.167
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-02-13 05:29:52
(4 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
myagent.site
2026-02-13 04:19:02
(4 months ago)
Blocking for trying to access an exploit file: /new/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-13 02:58:01
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:57:56.001324 2026] [security2:error] [pid 1202347:tid 1202347] [client 45.3.54.167:37365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manty.com"] [uri "/.env.production"] [unique_id "aY6TNK3wcrp1Lw7hIO0kKAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:35:24
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:35:20.565004 2026] [security2:error] [pid 5104:tid 5104] [client 45.3.54.167:32735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mahoninginn.com"] [uri "/config/.env"] [unique_id "aY5_2MvHtzuujZYXQHqnwAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 15:58:48
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 10:58:41.782113 2026] [security2:error] [pid 28182:tid 28182] [client 45.3.54.167:10409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dhappraisalservices.com"] [uri "/.git/config"] [unique_id "aY34seMxGX8_X3hxf0ZGzAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 00:15:05
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 19:14:58.057070 2026] [security2:error] [pid 23914:tid 23914] [client 45.3.54.167:61305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gasoilliquidsdaily.com"] [uri "/.env.staging"] [unique_id "aY0bgjfbKqf1eLQ4za2t8QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-11-10 01:20:50
(7 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇳🇱
EGP Abuse Dept
2025-10-17 12:39:32
(8 months ago)
Unauthorized connection to SSH port 22
Port Scan
Hacking
SSH
2025-03-30 22:16:34
(1 year ago)
[23:16:33] 11: Scanning for Exploits - /wp-login.php
Hacking
Bad Web Bot
Web App Attack