🇩🇪
LRob
2026-08-21 03:01:30
(4 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-login.php
show less
Hacking
Web App Attack
2026-08-20 10:36:16
(4 days ago)
Botnets flood DDoS activity
DDoS Attack
🇳🇱
Mangelot Hosting
2026-06-23 16:48:14
(2 months ago)
(bad_user_agent) srv104 Bad User-Agent 45.3.53.14 (BR/Brazil/-): 10 in the last 3600 secs; Ports: *; ...
show more
(bad_user_agent) srv104 Bad User-Agent 45.3.53.14 (BR/Brazil/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇨🇳
ThreatBook.io
2026-05-18 00:06:40
(3 months ago)
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/45.3.53.14
2026-05-17 11:00 ...
show more
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/45.3.53.14
2026-05-17 11:00:10 /
2026-05-17 10:54:00 /
show less
Web App Attack
🇬🇧
PeravixGroup
2026-05-08 01:43:06
(3 months ago)
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show more
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇺🇸
nationaleventpros.com
2026-02-18 00:41:51
(6 months ago)
web form spam (Nilsimsa: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA)
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 10:27:47
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:27:42.310648 2025] [security2:error] [pid 13344:tid 13344] [client 45.3.53.14:29063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cinemastation.de"] [uri "/.env"] [unique_id "aSbWHgH2DmSFsYJciSlVsQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 07:42:02
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:41:58.658084 2025] [security2:error] [pid 23046:tid 23046] [client 45.3.53.14:15787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.frelsburg.com"] [uri "/.env"] [unique_id "aSavRvA816YPVYPQ1pQcgwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:19:42
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:19:39.174822 2025] [security2:error] [pid 32264:tid 32264] [client 45.3.53.14:47587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yakaloco.tracybur.net"] [uri "/.svn/wc.db"] [unique_id "aSU8a6bhaeE-vIp6WDtZVQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-25 05:05:18
(8 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:59:42
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:59:35.379264 2025] [security2:error] [pid 1817001:tid 1817042] [client 45.3.53.14:18759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vote4joegardner.jd-web-designs.com"] [uri "/.env"] [unique_id "aSUpp2R1ttxeyDpsCa9K0wAAAYM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:27:50
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:27:44.202067 2025] [security2:error] [pid 11345:tid 11345] [client 45.3.53.14:48937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.norinpaco.com"] [uri "/.env"] [unique_id "aSUUIKGfCh7AEmGVx1Y3HgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:33:46
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:33:31.334069 2025] [security2:error] [pid 29513:tid 29513] [client 45.3.53.14:31099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.daisydoesoap.com"] [uri "/.svn/wc.db"] [unique_id "aSQma3Cn_kwkiTK6pI4LQQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:25:39
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:25:32.257625 2025] [security2:error] [pid 3688:tid 3688] [client 45.3.53.14:15343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wisdomsco.com"] [uri "/.svn/wc.db"] [unique_id "aSQWfAT3cd3Z8RJNrednlwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:50:45
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:50:38.519236 2025] [security2:error] [pid 12006:tid 12054] [client 45.3.53.14:32113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.landmarkocchealth.com"] [uri "/.svn/wc.db"] [unique_id "aSQAPkDKyspBjqfQ2lU_2AAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack