🇳🇱
homeshowdomain.nl
2026-05-27 22:01:17
(1 week ago)
Auto-ban: >3000 req/min op 2026-05-27
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-27 18:05:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 14:05:47.668784 2026] [security2:error] [pid 1312:tid 1312] [client 45.43.70.125:49183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modelengines.info"] [uri "/.env.backup"] [unique_id "ahcyey-fnd6Nk9p40odxMAAAAAw"], referer: https://www.google.com/search?q=modelengines.info
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 12:01:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 08:01:10.797723 2026] [security2:error] [pid 29467:tid 29548] [client 45.43.70.125:39205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lead-sleds.com"] [uri "/app/config/parameters.yml"] [unique_id "ahbdBp6i53ZJZj4NukOk7gAAAFI"], referer: https://www.google.com/search?q=webdisk.lead-sleds.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 10:13:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 06:13:39.609328 2026] [security2:error] [pid 18277:tid 18277] [client 45.43.70.125:57959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wvbigdaddy.summitmediawv.com"] [uri "/.env.backup"] [unique_id "ahbD03TF9xXOfxKtYabeoAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 00:58:26
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:58:19.325279 2026] [security2:error] [pid 9528:tid 9528] [client 45.43.70.125:43833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partybusesflint.com"] [uri "/sftp-config.json"] [unique_id "ahZBqwi8spsMInSBFZKjiwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 00:23:00
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:22:56.836308 2026] [security2:error] [pid 1046:tid 1046] [client 45.43.70.125:38081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.weathercarib.weathercarib.net"] [uri "/wp-config.php.swp"] [unique_id "ahY5YPQEyrr4Cdp_a5Hd8AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 23:51:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 19:50:41.883945 2026] [security2:error] [pid 27396:tid 27396] [client 45.43.70.125:50063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.asfmglobal.com"] [uri "/sftp-config.json"] [unique_id "ahYx0cijbeqSVIIprR5AyQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-05-26 18:02:44
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-26 16:50:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.43.70.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 12:50:06.344178 2026] [security2:error] [pid 14468:tid 14482] [client 45.43.70.125:44407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mjam.newtrendmag.org"] [uri "/wp-config.old"] [unique_id "ahXPPizM1cjuvPS0tspwiQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-01-12 21:08:02
(4 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2025-12-20 19:11:34
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -22.152 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -22.152 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.
show less
Bad Web Bot
Web App Attack