🇲🇽
octageeks.com
2026-08-13 04:23:58
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
cwytech
2026-07-30 16:14:18
(3 weeks ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-07-26 09:29:50
(4 weeks ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-07-23 17:38:12
(1 month ago)
Web App Attack
Web App Attack
2026-07-19 17:36:13
(1 month ago)
2026-07-19T19:36:12.404341+02:00 polaris wp(sahpa.co.za)[76136]: Blocked authentication attempt for ...
show more
2026-07-19T19:36:12.404341+02:00 polaris wp(sahpa.co.za)[76136]: Blocked authentication attempt for LisaNcube from 45.3.52.98
...
show less
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-07-16 06:12:23
(1 month ago)
Web App Attack
Web App Attack
🇮🇹
VHosting
2026-07-12 11:10:04
(1 month ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 05:27:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:27:34.406269 2026] [security2:error] [pid 25774:tid 25774] [client 45.3.52.98:16831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kruizekontrhl.com"] [uri "/test/.git/config"] [unique_id "aZafRuv7K7afSbTzMOVcEwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-19 02:24:32
(6 months ago)
Blocking for trying to access an exploit file: /test/.git/config
Hacking
🇺🇸
mnsf
2026-02-18 22:05:55
(6 months ago)
Too many Status 40X (11)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:42:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:42:26.437130 2026] [security2:error] [pid 27560:tid 27560] [client 45.3.52.98:38847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thirdplanettechnology.space"] [uri "/.env.local"] [unique_id "aZYIEstvz7lfdTSBG0eqagAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 23:31:00
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 18:30:56.165956 2025] [security2:error] [pid 20510:tid 20510] [client 45.3.52.98:55209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onerealopportunity.com"] [uri "/.env"] [unique_id "aToCsFM2yRUvRi4CQVhVbwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 04:46:49
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 23:46:44.375880 2025] [security2:error] [pid 25307:tid 25307] [client 45.3.52.98:56047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "velocitymech.com"] [uri "/.env"] [unique_id "aTeptPkoCupcMFwaZbADOwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 15:31:45
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:31:37.884688 2025] [security2:error] [pid 2061:tid 2061] [client 45.3.52.98:38693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "untraceable.org"] [uri "/.env"] [unique_id "aTWd2TyplZeDGhnb1XbMfgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 10:53:18
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.52.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 05:53:10.582064 2025] [security2:error] [pid 16515:tid 16515] [client 45.3.52.98:21609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gubbio.name"] [uri "/.git/HEAD"] [unique_id "aTQLForQ_dr2a6b6q2A0LAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack