🇫🇷
dynamix
2026-07-27 07:02:02
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 05:11:08
(1 day ago)
(mod_security) mod_security (id:240000) triggered by 45.67.96.22 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240000) triggered by 45.67.96.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:11:00.120135 2026] [security2:error] [pid 17349:tid 17349] [client 45.67.96.22:37831] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.ppcspetsitting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.ppcspetsitting.com"] [uri "/images/stories/themes.php"] [unique_id "amboZP1vcPfCmtMX_neYiwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-21 11:35:23
(1 week ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-07-18 05:16:39
(1 week ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-06-27 07:47:58
(1 month ago)
Multiple WAF Violations
Web App Attack
🇳🇱
maxxsense
2026-03-16 07:36:34
(4 months ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.67.96.22 (AU/Australi ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.67.96.22 (AU/Australia/-)
show less
Port Scan
🇷🇺
sms.ru
2026-03-15 19:46:06
(4 months ago)
/vendor/phpunit/phpunit/src/Util/PHP/ask.php
Web App Attack
🇳🇱
Site.eu
2026-03-15 00:58:20
(4 months ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-03-14 15:35:36
(4 months ago)
(mod_security) mod_security (id:240000) triggered by 45.67.96.22 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240000) triggered by 45.67.96.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 11:35:22.339903 2026] [security2:error] [pid 31902:tid 31902] [client 45.67.96.22:46887] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||bennecelli.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "bennecelli.com"] [uri "/images/stories/themes.php"] [unique_id "abWAOklhsDSv20gvh4dn8AAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-03-14 14:14:19
(4 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇫🇷
dynamix
2026-03-14 04:15:19
(4 months ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-03-13 02:08:29
(4 months ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Mangelot Hosting
2026-03-12 20:38:29
(4 months ago)
(upload_shell) srv201 Shell upload 45.67.96.22 (AU/Australia/-): 1 in the last 3600 secs; Ports: *; ...
show more
(upload_shell) srv201 Shell upload 45.67.96.22 (AU/Australia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-03-10 20:08:51
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 45.67.96.22 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 45.67.96.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 16:08:45.220592 2026] [security2:error] [pid 485:tid 485] [client 45.67.96.22:47169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||web243.dnchosting.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "web243.dnchosting.com"] [uri "/wp-content/plugins/erinyani/asasx.php.bak"] [unique_id "abB6TbW95FlF4xfchoGacwAAAFw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-03 19:39:44
(4 months ago)
Multiple web server 400 error codes from same source ip
Web App Attack