🇯🇵
cyber-guardians.net
2026-11-10 09:35:19
UTC ·
(4 days ago)
Brute-force login attack detected by WordPress firewall. 5 failed login attempts within the configured time window.
Brute-Force
🇺🇸
TPI-Abuse
2026-11-07 23:47:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.248.151.72 (72.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:47:32.384421 2026] [security2:error] [pid 25876:tid 25876] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.248.151.72 (72.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:47:32.384421 2026] [security2:error] [pid 25876:tid 25876] [client 45.248.151.72:54074] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||riser-astrology.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "riser-astrology.com"] [uri "/"] [unique_id "au-4lKc2vtQRSdrWKVpLrQAAAAM"], referer: https://mmluclinwesers.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 15:09:28
UTC ·
(1 week ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
2026-11-05 01:52:37
UTC ·
(1 week ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
🇩🇪
nyuuzyou
2026-11-04 12:09:36
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-04T12:09:36Z.
Bad Web Bot
🇩🇪
LRob
2026-10-26 11:00:53
UTC ·
(2 weeks ago)
Web exploit attempt | method: GET | path: /wp-json/wp/v2/users | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 22:34:28
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 45.248.151.72 (72.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:34:20.774282 2026] [security2:error] [pid 25375:tid 25375] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.248.151.72 (72.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:34:20.774282 2026] [security2:error] [pid 25375:tid 25375] [client 45.248.151.72:44916] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||crescentcitycafe.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "crescentcitycafe.com"] [uri "/"] [unique_id "asbI7MYtv6P5VeAiWBzNwwAAAAs"], referer: https://backlinkproviders.online/dir/ethical-seo-backlinks-47133
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-03 14:47:59
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇫🇮
KnightIndustries
2026-09-27 10:33:29
UTC ·
(1 month ago)
2026-09-27T12:33:07.774525+02:00 milkyway wordpress(fawcettcomputerservices.com)[627328]: XML-RPC authentication failure for joshua from 45.248.151.72
2026-09-27T12:33:18.211047+02:00 milkyway wordpress(fawcettcomputerservices.com)[627325]: XML-RPC a ...
show more
2026-09-27T12:33:07.774525+02:00 milkyway wordpress(fawcettcomputerservices.com)[627328]: XML-RPC authentication failure for joshua from 45.248.151.72
2026-09-27T12:33:18.211047+02:00 milkyway wordpress(fawcettcomputerservices.com)[627325]: XML-RPC authentication failure for joshua from 45.248.151.72
2026-09-27T12:33:28.870016+02:00 milkyway wordpress(fawcettcomputerservices.com)[625847]: XML-RPC authentication failure for joshua from 45.248.151.72
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 08:58:05
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 45.248.151.72 (72.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 04:58:02.047446 2026] [security2:error] [pid 32250:tid 32250] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.248.151.72 (72.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 04:58:02.047446 2026] [security2:error] [pid 32250:tid 32250] [client 45.248.151.72:53946] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pioneercanadian.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pioneercanadian.com"] [uri "/"] [unique_id "areJGp57FWtQZbOzZbYn0wAAACQ"], referer: https://seofriendlychecker.store/dir/ranking-boost-backlinks-162737
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-22 09:37:36
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-09-22 06:46:17
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇦🇺
electronico
2026-09-19 12:13:01
UTC ·
(1 month ago)
45.248.151.72 - - [19/Sep/2026:23:13:00 +1100] "POST /xmlrpc.php HTTP/1.1" 301 5773 "-" "Jetpack/12.0; WordPress/6.4; http://site32858527.com"
...
Brute-Force
Web App Attack
🇧🇪
madeit
2026-09-16 17:03:37
UTC ·
(1 month ago)
Web App Attack
🇺🇸
鬼影233
2026-09-11 06:42:52
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
