🇺🇸
ambor
2026-03-25 14:46:55
(2 months ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇧🇪
voormedia
2026-03-13 17:05:54
(2 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇺🇸
nationaleventpros.com
2026-03-05 06:52:43
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
xmission.com
2026-03-02 16:29:06
(3 months ago)
45.148.232.227 - - [02/Mar/2026:09:29:06 -0700] "POST /wp-login.php HTTP/1.1" 200 2334 "https://dooc ...
show more
45.148.232.227 - - [02/Mar/2026:09:29:06 -0700] "POST /wp-login.php HTTP/1.1" 200 2334 "https://dooce.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-02-25 20:45:51
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 45.148.232.227 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 45.148.232.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 15:45:46.740727 2026] [security2:error] [pid 20139:tid 20139] [client 45.148.232.227:50641] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||edenberg.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "edenberg.com"] [uri "/"] [unique_id "aZ9fep9OTDO6jCuEFrzUNQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-07-02 16:51:23
(11 months ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 45.148.232.227
2025-07-02T17:48:08+02 ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 45.148.232.227
2025-07-02T17:48:08+02:00 vpn Access-Reject 'a.robinson' station: 45.148.232.227 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-07-02T17:55:37+02:00 vpn Access-Reject 'j.stephens' station: 45.148.232.227 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-07-02T18:00:40+02:00 vpn Access-Reject 'j.roberts' station: 45.148.232.227 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-07-02T18:07:14+02:00 vpn Access-Reject 's.rivera' station: 45.148.232.227 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-06-30 03:23:47
(11 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 45.148.232.227
2025-06-30T04:24:15+02 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 45.148.232.227
2025-06-30T04:24:15+02:00 vpn Access-Reject 'rodriguez' station: 45.148.232.227 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-30T04:30:32+02:00 vpn Access-Reject 'durham' station: 45.148.232.227 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-06-29 04:51:10
(11 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.232.227
2025-06-29T06:44:32+02 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.232.227
2025-06-29T06:44:32+02:00 vpn Access-Reject 'spam.test' station: 45.148.232.227 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2025-05-27 10:16:09
(1 year ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
2025-05-01 20:05:33
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇨🇭
backslash
2025-03-21 22:50:11
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇬🇧
SilverZippo
2025-03-20 22:30:25
(1 year ago)
Web App Attack
Web App Attack
2025-01-21 14:33:31
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2023-11-12 17:57:09
(2 years ago)
opencart admin attack from fail2ban
...
DDoS Attack
Brute-Force
SSH
🇳🇿
Tripwire
2023-08-16 11:53:45
(2 years ago)
Wordpress login attempts
Brute-Force
Web App Attack