🇨🇭
backslash
2026-05-27 04:48:00
(1 week ago)
Web Spam
🇦🇺
MAGIC
2026-05-05 00:27:32
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇱🇻
garmtech.com
2026-04-23 03:15:52
(1 month ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-15.45.3.32.215.web-spammers ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-15.45.3.32.215.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇩🇪
LRob.fr
2026-03-29 23:45:10
(2 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-03-19 08:13:54
(2 months ago)
Try to access /xmlrpc.php
Web App Attack
🇳🇱
EGP Abuse Dept
2026-02-23 04:30:34
(3 months ago)
Scanning for web/db/file exploits on www.ogen.com
SQL Injection
Bad Web Bot
Web App Attack
2026-01-20 17:32:32
(4 months ago)
wordpress-trap
Web App Attack
🇪🇸
10dencehispahard SL
2025-12-29 09:32:09
(5 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2025-12-09 17:53:15
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-26 10:26:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:26:24.177624 2025] [security2:error] [pid 13611:tid 13611] [client 45.3.32.215:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dentguyvt.com"] [uri "/.svn/wc.db"] [unique_id "aSbV0KZPe9yeFGG5bpCz6AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:07:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:07:40.613209 2025] [security2:error] [pid 24368:tid 24368] [client 45.3.32.215:44931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.polarfoxinno.com"] [uri "/.git/HEAD"] [unique_id "aSbRbB05gPC_3DevZBvqRgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:08:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:08:12.857414 2025] [security2:error] [pid 16041:tid 16041] [client 45.3.32.215:29279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vrbsroma.com"] [uri "/.svn/wc.db"] [unique_id "aSbDfFoWK3d3IafRtw0e_AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-26 09:02:27
(6 months ago)
45.3.32.215 - - [26/Nov/2025:09:02:26 +0000] "GET /.env HTTP/1.1" 302 445 "-" "Mozilla/5.0 (Windows ...
show more
45.3.32.215 - - [26/Nov/2025:09:02:26 +0000] "GET /.env HTTP/1.1" 302 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:39:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:39:11.913449 2025] [security2:error] [pid 20111:tid 20111] [client 45.3.32.215:18227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.polymermembranes.com"] [uri "/.svn/wc.db"] [unique_id "aSagj4uq-K-l4M56woWTAgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:11:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:11:29.886900 2025] [security2:error] [pid 20042:tid 20042] [client 45.3.32.215:17499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.investorscalifornia.com"] [uri "/.svn/wc.db"] [unique_id "aSZTwcSCVwvJJHY8JzavaQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack