🇺🇸
TPI-Abuse
2026-04-30 22:51:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.132.186.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.186.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 18:51:02.051902 2026] [security2:error] [pid 12258:tid 12258] [client 45.132.186.147:38919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skulldump.blockdredge.com"] [uri "/.env"] [unique_id "afPc1vauYtY2ddpnLf9xnwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
lakered
2026-04-29 19:47:19
(1 month ago)
Honeypot Lakered: Nginx Honeypot: Sensitive configuration file search (Pattern: .aws). IP automatica ...
show more
Honeypot Lakered: Nginx Honeypot: Sensitive configuration file search (Pattern: .aws). IP automatically banned.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 16:09:39
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.132.186.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.132.186.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 12:09:32.068230 2026] [security2:error] [pid 19150:tid 19150] [client 45.132.186.147:22171] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sb-adventures.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sb-adventures.com"] [uri "/s3cmd.ini"] [unique_id "afItPMJ1fHZQVS8BFo3tfAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 15:17:32
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.132.186.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.132.186.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 11:17:25.652260 2026] [security2:error] [pid 14678:tid 14678] [client 45.132.186.147:14951] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||w3.chilako.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "w3.chilako.com"] [uri "/s3cmd.ini"] [unique_id "afIhBXg4iHD8xbQ2Cs8XxwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-05 19:16:28
(3 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-10-12 20:47:02
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 16:46:53.835460 2025] [security2:error] [pid 7768:tid 7768] [client 45.132.186.147:16151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||spacebooger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "spacebooger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOwTvfD2JPr2t-255Uq6RQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-06-17 10:41:18
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇦
wil.com
2025-04-01 10:52:00
(1 year ago)
GlobalProtect login attempts with user DENNISY.
VPN IP
Brute-Force
🇦🇺
[email protected]
2025-02-18 14:00:37
(1 year ago)
""
DNS Compromise
DNS Poisoning
DDoS Attack
FTP Brute-Force
Phishing
Open Proxy
Web Spam
Email Spam
Blog Spam
VPN IP
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
Keratin
2023-05-18 08:56:57
(3 years ago)
Possible web app exploitation
Brute-Force
Web App Attack
🇿🇦
IrisFlower
2022-09-17 09:58:25
(3 years ago)
Unauthorized connection attempt detected from IP address 45.132.186.147 to port 443 [J]
Port Scan
Hacking
🇺🇸
SiliSoftware
2022-01-19 20:06:33
(4 years ago)
Web Spam