|
🇮🇳
dineshskt4all
|
|
[Sun Mar 29 07:15:37.497880 2026] [proxy_fcgi:error] [pid 1741390:tid 132699700315840] [client 45.133.6.55:0] AH01071: Got error 'Primary script unknown'
...
|
Brute-Force
|
|
🇦🇹
Erpelstolz
|
|
VM 131: 45.133.6.55 - - [18/Mar/2026:12:37:50 +0100] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 404 590
|
Web App Attack
|
|
Anonymous
|
|
ALFA.TEaM.Web.Shell
|
Web App Attack
|
|
🇳🇿
Antinson
|
|
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
|
Bad Web Bot
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240000) triggered by 45.133.6.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 21:50:10.175436 2026] [security2:error] [pid 1257:tid 1257] [client 45.133.6.55:38653] ModSecu ...
show more
(mod_security) mod_security (id:240000) triggered by 45.133.6.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 21:50:10.175436 2026] [security2:error] [pid 1257:tid 1257] [client 45.133.6.55:38653] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.digi-estudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.digi-estudio.com"] [uri "/images/stories/themes.php"] [unique_id "abNtUn6XJO3tx2kWk7aRrwAAABw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 45.133.6.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 20:32:08.663005 2026] [security2:error] [pid 7288:tid 7288] [client 45.133.6.55:31419] ModSecu ...
show more
(mod_security) mod_security (id:210730) triggered by 45.133.6.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 20:32:08.663005 2026] [security2:error] [pid 7288:tid 7288] [client 45.133.6.55:31419] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||1writeforthegrant.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "1writeforthegrant.com"] [uri "/wp-content/plugins/erinyani/asasx.php.bak"] [unique_id "abC4CG8ZFtZ-eutlI0vs8QAAAGU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇪
cmbplf
|
|
246 requests with url.path */.well-known/pki-validation/*.php
215 requests with url.path */.well-known/acme-challenge/*.php
|
Brute-Force
Bad Web Bot
|
|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: >3000 req/min op 2026-03-02
|
Web App Attack
SSH
Hacking
|
|
🇺🇦
URAN Publishing Service
|
|
45.133.6.55 - - [02/Mar/2026:07:51:36 +0200] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
45.133.6.55 - - [02/Ma ...
show more
45.133.6.55 - - [02/Mar/2026:07:51:36 +0200] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
45.133.6.55 - - [02/Mar/2026:07:51:36 +0200] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
Anonymous
|
|
Unauthorized connection attempt detected in the last 24 hours
|
Hacking
|
|
Anonymous
|
|
wordpress-trap
|
Web App Attack
|
|
🇨🇭
zynex
|
|
URL Probing: /mah.php
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240000) triggered by 45.133.6.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 09:21:24.903362 2026] [security2:error] [pid 2706:tid 2706] [client 45.133.6.55:63047] ModSecu ...
show more
(mod_security) mod_security (id:240000) triggered by 45.133.6.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 09:21:24.903362 2026] [security2:error] [pid 2706:tid 2706] [client 45.133.6.55:63047] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||mindtoken.app|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "mindtoken.app"] [uri "/images/stories/themes.php"] [unique_id "aZMn5K-TN1M9_r7TibeRnQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
