🇫🇷
masterguru
2026-04-06 01:58:33
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.3.32.202 (US/United States/-): 1 in the las ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.3.32.202 (US/United States/-): 1 in the last 3600 secs (0-193)
show less
Hacking
🇫🇷
masterguru
2026-03-27 22:22:13
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.3.32.202 (US/United States/-): 1 in the las ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.3.32.202 (US/United States/-): 1 in the last 3600 secs (0-193)
show less
Hacking
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇱🇻
garmtech.com
2026-02-26 15:54:56
(3 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇺🇸
TPI-Abuse
2026-02-16 12:52:26
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 07:52:19.531413 2026] [security2:error] [pid 29134:tid 29134] [client 45.3.32.202:12155] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dhappraisalservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dhappraisalservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZMTA_aW0U0dXbge1Mj52AAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2025-12-30 10:26:06
(5 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:21:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:21:01.721896 2025] [security2:error] [pid 16698:tid 16698] [client 45.3.32.202:32635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roumer.com"] [uri "/.env"] [unique_id "aVIdzceRVvi5O9Tgj0DzGAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-29 06:06:56
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇮🇹
VHosting
2025-12-23 18:15:23
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-02 22:31:17
(6 months ago)
botnet
DDoS Attack
🇫🇮
Shaik Sai Meera
2025-11-25 20:25:06
(6 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2025-11-25 03:25:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:25:03.535313 2025] [security2:error] [pid 9141:tid 9141] [client 45.3.32.202:53387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mathgen.com"] [uri "/.git/HEAD"] [unique_id "aSUhj4OVvvRBZboirdfWfQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:04:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:04:25.735183 2025] [security2:error] [pid 710846:tid 710846] [client 45.3.32.202:16241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.15tobefit.com"] [uri "/.env"] [unique_id "aSUcuYxlOKRAGxhK8hf_WwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-25 01:39:33
(6 months ago)
Probing to gain illegal access
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:45:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:45:24.738740 2025] [security2:error] [pid 25884:tid 25884] [client 45.3.32.202:42847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.buckinghambar.com"] [uri "/.git/HEAD"] [unique_id "aST8JEbEE2qLKzm6_EjMnAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack