🇳🇱
Mangelot Hosting
2026-07-10 01:26:19
(6 hours ago)
(db_admin_scan) srv101 DB admin scan 64.112.56.45 (US/United States/-): 1 in the last 3600 secs; Por ...
show more
(db_admin_scan) srv101 DB admin scan 64.112.56.45 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 00:09:29
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 20:09:21.154322 2026] [security2:error] [pid 31868:tid 31868] [client 64.112.56.45:55277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.officechristmascards.com"] [uri "/.env.dev.local"] [unique_id "alA4MbB28e6p9Z2_n8DvkAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-07-09 20:15:00
(12 hours ago)
IPBlock protected site ID [4055-d][s=03].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
🇳🇱
MacLotsen
2026-07-09 20:13:13
(12 hours ago)
Violated robots.txt
Web Spam
🇫🇷
polido
2026-07-09 16:03:44
(16 hours ago)
[Oracle] Unauthorized connection attempt to port 443 from 64.112.56.45
Port Scan
🇬🇧
SilverZippo
2026-07-09 15:15:25
(16 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 10:48:56
(21 hours ago)
(mod_security) mod_security (id:212620) triggered by 64.112.56.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:212620) triggered by 64.112.56.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:48:39.219372 2026] [security2:error] [pid 630:tid 630] [client 64.112.56.45:57663] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "3"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||thegoldentether.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /board/viewforum.php?f=75'\\x22><script>alert(68752)</script>&sid=e70e073346e3079003afcee2303c0fa8"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "thegoldentether.com"] [uri "/board/viewforum.php"] [unique_id "ak98h4ze9UjMqMo0HjK5yAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
OK
2026-07-09 09:50:18
(22 hours ago)
HTTP/HTTPS
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 08:53:28
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:53:09.044211 2026] [security2:error] [pid 17184:tid 17222] [client 64.112.56.45:49885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adultbaja.com"] [uri "/.env.development.local"] [unique_id "ak9hdeXYIxB8v2RRTA_r5QAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-09 08:27:07
(23 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 08:19:13
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:18:51.787433 2026] [security2:error] [pid 21678:tid 21678] [client 64.112.56.45:45467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrbaystreet.com"] [uri "/.env.prod"] [unique_id "ak9ZaxFOsx9_396FLoMowAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-07-09 03:36:52
(1 day ago)
Wordpress hacking attempt
Web App Attack
🇨🇦
polycoda
2026-07-08 23:41:02
(1 day ago)
🥶 Part of a DDoS attack wave
DDoS Attack
🇨🇦
polycoda
2026-07-08 21:48:26
(1 day ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇬🇧
AvonleaConsulting
2026-07-08 20:29:19
(1 day ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack