🇫🇷
Sklurk
2026-07-09 01:13:32
(16 hours ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-08 01:12:08
(1 day ago)
Web App Attack
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-14 19:37:25
(3 weeks ago)
(bad_user_agent) srv103 Bad User-Agent 45.3.48.115 (US/United States/-): 10 in the last 3600 secs; P ...
show more
(bad_user_agent) srv103 Bad User-Agent 45.3.48.115 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇮🇩
Burayot
2026-04-20 23:11:42
(2 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.48.115 (US/United States/-): 2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.48.115 (US/United States/-): 2 in the last 3600 secs
show less
Web App Attack
2026-04-16 03:11:24
(2 months ago)
Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (X11; Linux x86 ...
show more
Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 11:34:06
(5 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇩🇪
itsolon
2025-12-27 23:02:16
(6 months ago)
Fail2Ban plesk-modsecurity ban
Web App Attack
SSH
🇮🇹
VHosting
2025-12-25 13:45:12
(6 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 02:07:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 21:07:10.646357 2025] [security2:error] [pid 6438:tid 6438] [client 45.3.48.115:58873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffscottnursing.com"] [uri "/.git/HEAD"] [unique_id "aTonTsJMHsK_e0yGNthrpAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 00:03:40
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 19:03:37.114103 2025] [security2:error] [pid 23400:tid 23400] [client 45.3.48.115:15139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abbeygardensllandudno.com"] [uri "/.env"] [unique_id "aTdnWVuOQWp6m3TPxbXT0wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 11:56:22
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:56:18.904375 2025] [security2:error] [pid 24445:tid 24445] [client 45.3.48.115:57379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valuechains4poor.net"] [uri "/.git/HEAD"] [unique_id "aTQZ4iJhhbDdGYhKqzk_igAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 12:51:12
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 07:51:08.855245 2025] [security2:error] [pid 18508:tid 18528] [client 45.3.48.115:48385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geoception.com"] [uri "/.svn/wc.db"] [unique_id "aTLVPE6QxcYcOHsrjFUhWwAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 09:30:07
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:29:57.589491 2025] [security2:error] [pid 6090:tid 6090] [client 45.3.48.115:41941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerlinemagazine.com"] [uri "/.env"] [unique_id "aTKmFdFSn5kJ4OfawQtL7gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:35:18
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:35:12.540950 2025] [security2:error] [pid 27042:tid 27042] [client 45.3.48.115:27331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mhebert.com"] [uri "/.git/HEAD"] [unique_id "aTJS8NooUO7H_rGyvDJFtwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 00:32:17
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 19:31:44.052176 2025] [security2:error] [pid 27031:tid 27031] [client 45.3.48.115:20997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "princessnapkins.com"] [uri "/.svn/wc.db"] [unique_id "aTIn8LA_hMumM6OGGbJFZQAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack