|
🇺🇸
LotPhantom
|
|
2026/04/19 18:27:32 [error] 510848#510848: *80545 connect() failed (111: Connection refused) while c ...
show more
2026/04/19 18:27:32 [error] 510848#510848: *80545 connect() failed (111: Connection refused) while connecting to upstream, client: 45.3.32.95, server: wynnesmiles.com, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:4001/", host: "wynnesmiles.com"
...
show less
|
Web App Attack
|
|
|
Anonymous
|
|
Forum/form spam
|
Web Spam
|
|
|
🇫🇷
COMAITE
|
|
SQL injection attempt from 45.3.32.95.
|
Web App Attack
|
|
|
Anonymous
|
|
Forum/form spam
|
Web Spam
|
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
|
🇺🇸
myagent.site
|
|
Blocking for trying to access an exploit file: /.aws/credentials
|
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:49:42.526870 2026] [security2:error] [pid 21770:tid 21770] [client 45.3.32.95:34267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portraitgalleria.com"] [uri "/site/.git/config"] [unique_id "aZFCVo76i2gYpmyffI5PtQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:14:47.238642 2026] [security2:error] [pid 20317:tid 20317] [client 45.3.32.95:36725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nlc-calumet.org"] [uri "/.git/config"] [unique_id "aZE6J1PUc0aROo21keAXrAAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:55:19.081258 2026] [security2:error] [pid 2110:tid 2110] [client 45.3.32.95:19459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nihlabs.org"] [uri "/new/.git/config"] [unique_id "aZE1l1SbBGuCnzSaZJnKDAAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
mnsf
|
|
Scanning/Probing (23)
|
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 19:58:22.460164 2026] [security2:error] [pid 2332353:tid 2332353] [client 45.3.32.95:14167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "php-science-labs.com"] [uri "/.env"] [unique_id "aZEaLnNVp3hfmX49nrJx6gAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 10:55:27.936261 2026] [security2:error] [pid 17078:tid 17078] [client 45.3.32.95:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "antitribu.com"] [uri "/.env.local"] [unique_id "aYtU76NQyxc_55UVstavZAAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇳🇱
ParaBug
|
|
45.3.32.95 - - [10/Feb/2026:16:32:48 +0100] "GET /dev/.git/config HTTP/1.1" 301 3365 "-" "Mozilla/5. ...
show more
45.3.32.95 - - [10/Feb/2026:16:32:48 +0100] "GET /dev/.git/config HTTP/1.1" 301 3365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Phishing
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:17:39.746445 2026] [security2:error] [pid 1277694:tid 1277708] [client 45.3.32.95:22281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magusincognito.com"] [uri "/wp/.git/config"] [unique_id "aYq_c246PhfGVrTiBMFoFwAAAEw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|