|
🇺🇸
kosada.com
|
|
Web password guessing
|
Brute-Force
|
|
|
🇺🇸
NicoID
|
|
45.159.20.105 - - [30/Apr/2026:15:40:18 -0600] "GET /wp-login.php HTTP/1.1" 200 4884 "https://www.go ...
show more
45.159.20.105 - - [30/Apr/2026:15:40:18 -0600] "GET /wp-login.php HTTP/1.1" 200 4884 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
|
Brute-Force
|
|
|
🇺🇸
kosada.com
|
|
Web password guessing
|
Brute-Force
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.159.20.105 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.159.20.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 11:45:19.417743 2026] [security2:error] [pid 7943:tid 7943] [client 45.159.20.105:12403] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeuQD3SOwdqiWX3T5GcSwwAAAA4"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.159.20.105 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.159.20.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 21:27:41.176176 2026] [security2:error] [pid 2077238:tid 2077238] [client 45.159.20.105:23351] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||televisonic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "televisonic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aebSja5h36FAn6kqO570eAAAAAE"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
bazter.pro
|
|
Auto-Ban [2026-03-25 00:12:44]: CRITICAL: Sensitive files (2); DC: FINE GROUP SERVERS SOLUTIONS LLC ...
show more
Auto-Ban [2026-03-25 00:12:44]: CRITICAL: Sensitive files (2); DC: FINE GROUP SERVERS SOLUTIONS LLC [Paths: 2] | Details: Sensitive files/paths: /xmlrpc.php, /xmlrpc.php | Other paths: /xmlrpc.php, /wp-login.php
show less
|
Web App Attack
Hacking
|
|
|
Anonymous
|
|
FPROCO WEBEXPLOIT 45.159.20.105 (45.159.20.105)
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.159.20.105 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.159.20.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 19:44:03.071772 2026] [security2:error] [pid 4110046:tid 4110145] [client 45.159.20.105:55083] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelrandon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelrandon.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXLEU3_svJsFLArIkufkPgAAARE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
big-cloud.nl
|
|
Try to access /xmlrpc.php
|
Web App Attack
|
|
|
🇺🇸
kosada.com
|
|
Web password guessing
|
Brute-Force
|
|
|
Anonymous
|
|
Attempted WordPress login:
45.159.20.105 - - [05/Oct/2025:16:46:30 +0100] "GET /wp-login.php HTTP/1 ...
show more
Attempted WordPress login:
45.159.20.105 - - [05/Oct/2025:16:46:30 +0100] "GET /wp-login.php HTTP/1.1" 200 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.2"
show less
|
Hacking
Web App Attack
|
|
|
🇬🇧
SilverZippo
|
|
Web App Attack
|
Web App Attack
|
|
|
🇨🇿
lp
|
|
Unauthorized VPN login attempts: 2 attempts were recorded from 45.159.20.105
2025-08-16T23:34:58+02: ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 45.159.20.105
2025-08-16T23:34:58+02:00 vpn Access-Reject 'payuka' station: 45.159.20.105 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-08-16T23:38:34+02:00 vpn Access-Reject 'peropo' station: 45.159.20.105 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
|
Brute-Force
Web App Attack
|
|
|
Anonymous
|
|
This IP was involved in an brute force and password spray attack on 2025/03/30 08:29:46
|
Port Scan
Brute-Force
Exploited Host
Web App Attack
|
|
|
Anonymous
|
|
This IP was involved in an brute force and password spray attack on 2025/03/28 08:23:17
|
Port Scan
Brute-Force
Exploited Host
Web App Attack
|
|