🇮🇹
CoreTech srl
2026-11-14 20:08:57
UTC ·
(5 minutes ago)
cloudlinux2 fail2ban: 2026-11-14 21:04:00,336 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 45.175.162.40 - 2026-11-14 21:03:59cloudlinux2 fail2ban: 2026-11-14 21:04:25,233 fail2ban.filter [1443]: INFO [plesk-wordpress] F ...
show more
cloudlinux2 fail2ban: 2026-11-14 21:04:00,336 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 45.175.162.40 - 2026-11-14 21:03:59cloudlinux2 fail2ban: 2026-11-14 21:04:25,233 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 213.109.233.230 - 2026-11-14 21:04:24cloudlinux2 fail2ban: 2026-11-14 21:04:59,700 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 82.26.235.44 - 2026-11-14 21:04:59cloudlinux2 fail2ban: 2026-11-14 21:05:19,830 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 42.190.140.226 - 2026-11-14 21:05:19cloudlinux2 fail2ban: 2026-11-14 21:05:52,096 fail2ban.actions [1443]: NOTICE [plesk-modsecurity] Unban 3.71.74.83cloudlinux2 fail2ban: 2026-11-14 21:06:01,741 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 104.222.165.20 - 2026-11-14 21:06:01cloudlinux2 fail2ban: 2026-11-14 21:07:08,329 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 187.190.242.184 - 2026-11-14 21:07:06cloudlinux2 fail2ban: 2
show less
Web App Attack
🇬🇧
spamverify.com
2026-11-14 09:42:56
UTC ·
(10 hours ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 02:20:42
UTC ·
(17 hours ago)
(mod_security) mod_security (id:225170) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:20:38.554729 2026] [security2:error] [pid 9688:tid 9688] [client 45.175.162.40:0] ModSecu ...
show more
(mod_security) mod_security (id:225170) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:20:38.554729 2026] [security2:error] [pid 9688:tid 9688] [client 45.175.162.40:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abdulhameeds.art|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abdulhameeds.art"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avfFdo4Jw8LbubAqgifxCwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ingroscart.it
2026-11-13 20:35:33
UTC ·
(23 hours ago)
(wordpress) Failed wordpress login from 45.175.162.40 (AR/Argentina/Mendoza/Mendoza/-/[redacted])
Brute-Force
🇺🇸
TPI-Abuse
2026-11-13 02:28:57
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:28:52.411862 2026] [security2:error] [pid 3281:tid 3281] [client 45.175.162.40:38810] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:28:52.411862 2026] [security2:error] [pid 3281:tid 3281] [client 45.175.162.40:38810] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||btsalesrep.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "btsalesrep.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avZ15EqvjgGr1Zxv9QJOswAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-12 19:15:02
UTC ·
(2 days ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-11-11 15:24:04
UTC ·
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇵🇱
bmino.pl
2026-11-11 11:32:26
UTC ·
(3 days ago)
Autoban IP(2): 45.175.162.40 - Hostname: Redes Del Oeste S.A - City: Mendoza - Country: Argentina - Organization: Redes Del Oeste S.A - Reason: POST /xmlrpc.php HTTP/2.0
Web App Attack
🇫🇮
inlink.ltd
2026-11-10 09:28:36
UTC ·
(4 days ago)
Known malicious PHP file or CMS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:03:43
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:03:39.483313 2026] [security2:error] [pid 24910:tid 24910] [client 45.175.162.40:56088] M ...
show more
(mod_security) mod_security (id:225170) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:03:39.483313 2026] [security2:error] [pid 24910:tid 24910] [client 45.175.162.40:56088] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pharmaceuticalsalescertifications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pharmaceuticalsalescertifications.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avLP26IbWZ6RWK0QcvY2JgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 06:35:21
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:35:18.297032 2026] [security2:error] [pid 25312:tid 25312] [client 45.175.162.40:55228] M ...
show more
(mod_security) mod_security (id:225170) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:35:18.297032 2026] [security2:error] [pid 25312:tid 25312] [client 45.175.162.40:55228] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||torresyrellenos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "torresyrellenos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avK7Jkn8aiOft8UeQUWjfgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:53:55
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:53:47.833195 2026] [security2:error] [pid 2501967:tid 2501993] [client 45.175.162.40:3401 ...
show more
(mod_security) mod_security (id:210492) triggered by 45.175.162.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:53:47.833195 2026] [security2:error] [pid 2501967:tid 2501993] [client 45.175.162.40:34018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "executiveaccounting.net"] [uri "/wp-config.php.txt"] [unique_id "avJ5K2vti4-b0UlDlhr2pwAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-11-09 16:44:49
UTC ·
(5 days ago)
45.175.162.40 - - [09/Nov/2026:17:44:49 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E148 Safari/604.1"
Brute-force password attem ...
show more
45.175.162.40 - - [09/Nov/2026:17:44:49 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E148 Safari/604.1"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇩🇪
big-cloud.nl
2026-11-09 03:51:28
UTC ·
(5 days ago)
Try to access /xmlrpc.php
Web App Attack
🇩🇪
Hazzard
2026-11-08 10:20:21
UTC ·
(6 days ago)
(wordpress) Failed wordpress login from 45.175.162.40 (AR/Argentina/Mendoza/Mendoza/-/[redacted]): (CF_ENABLE)
Brute-Force
