🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇬🇧
Swiptly
2026-01-21 16:26:38
(4 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2026-01-21 15:33:03
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 10:32:59.362594 2026] [security2:error] [pid 3588224:tid 3588224] [client 45.3.54.221:19967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stgeorgellc.com"] [uri "/.env"] [unique_id "aXDxq28tip90QI1syy7HvAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-21 13:33:18
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 08:33:11.353582 2026] [security2:error] [pid 5998:tid 5998] [client 45.3.54.221:25805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eatcakecup.com"] [uri "/.git/HEAD"] [unique_id "aXDVl0ReCL1ZHR93b5tmiwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-01-02 23:01:49
(5 months ago)
Auto-ban: >3000 req/min op 2026-01-02
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-24 09:30:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:30:11.717423 2025] [security2:error] [pid 20272:tid 20272] [client 45.3.54.221:42933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.inverzona.com"] [uri "/.env"] [unique_id "aSQlo0oEV0t1TseBBpB6rAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-24 06:31:08
(6 months ago)
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:24:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:24:12.223545 2025] [security2:error] [pid 7964:tid 7964] [client 45.3.54.221:50555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adrienberthaud.com"] [uri "/.env"] [unique_id "aSPr_FtVUej4tCGDTdB2lQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-24 05:17:50
(6 months ago)
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ...
show more
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:11:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:11:02.812593 2025] [security2:error] [pid 7465:tid 7465] [client 45.3.54.221:60499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dogdimension.com"] [uri "/.git/HEAD"] [unique_id "aSPa1nFdiTTzylmsf4YNwwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 03:47:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:47:35.655144 2025] [security2:error] [pid 4744:tid 4744] [client 45.3.54.221:18825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.catzpaw.com"] [uri "/.git/HEAD"] [unique_id "aSPVVzc61gJhmMRjj8p9oAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
oncord
2025-10-18 03:44:51
(7 months ago)
Form spam
Web Spam
🇺🇸
oncord
2025-10-15 12:55:45
(7 months ago)
Form spam
Web Spam
🇨🇭
backslash
2025-04-07 05:20:05
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2024-12-16 10:56:42
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.54.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 16 05:56:39.042349 2024] [security2:error] [pid 29222:tid 29222] [client 45.3.54.221:51031] [client 45.3.54.221] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||roumer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "roumer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2AHZ36ObvOVNpFaF_TlFAAAAAA"], referer: https://roumer.com
show less
Brute-Force
Bad Web Bot
Web App Attack