🇫🇷
DUBREUIL
2026-07-22 20:37:00
(1 day ago)
As always with 3xktech.cloud
DDoS Attack
Open Proxy
Port Scan
Brute-Force
Web App Attack
SSH
Hacking
SQL Injection
🇫🇷
Sklurk
2026-07-18 07:33:16
(5 days ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-23 04:28:58
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 20:00:03
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 14:59:58.351561 2026] [security2:error] [pid 15774:tid 15774] [client 45.3.33.75:17389] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jrpiano.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jrpiano.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYzfvou7qCTlIxp0rneayQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-08 05:49:54
(7 months ago)
botnet
DDoS Attack
🇧🇪
voormedia
2025-12-01 09:47:59
(7 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:46:03
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:45:56.659433 2025] [security2:error] [pid 12509:tid 12509] [client 45.3.33.75:55027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.herecometheplanes.com"] [uri "/.env"] [unique_id "aSPxFIuy-3-Rj3BipnEsAQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:50:32
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:50:27.714922 2025] [security2:error] [pid 18194:tid 18292] [client 45.3.33.75:22817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.daviscountyossr.org"] [uri "/.svn/wc.db"] [unique_id "aSPkE-9urIyQu8V3f-3gCAAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:23:53
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:23:42.771119 2025] [security2:error] [pid 31285:tid 31285] [client 45.3.33.75:47759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blog.istanbulartlist.com.pist.org.tr"] [uri "/.git/HEAD"] [unique_id "aSPdzmDBNlTkfdL6eWIfLAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 16:44:26
(8 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇭🇺
zolav8
2025-11-08 04:45:33
(8 months ago)
SQL injection / web attack attempt
Hacking
SQL Injection
🇺🇸
fbarela
2025-11-07 08:00:03
(8 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
2025-11-02 15:38:12
(8 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 07:22:45
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-10-23 19:58:33
(9 months ago)
(mod_security) mod_security (id:211700) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:211700) triggered by 45.3.33.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 15:57:53.443710 2025] [security2:error] [pid 8294:tid 8294] [client 45.3.33.75:11269] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:[ ()]case ?\\\\(|\\\\) ?like ?\\\\(|\\\\bhaving ?[^\\\\s]+ ?[^\\\\w ]|\\\\bif ?\\\\([\\\\d\\\\w] ?[=<>~])" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "33"] [id "211700"] [rev "8"] [msg "COMODO WAF: Detects conditional SQL injection attempts||kountz.org|F|2"] [data "Matched Data: having found within MATCHED_VAR: kountzAND1GROUPBYCONCAT(0x6f504761,(SELECT(ELT(2836=2836,1))),0x68315570,FLOOR(RAND(0)*2))HAVINGMIN(0)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "kountz.org"] [uri "/famsearch.php"] [unique_id "aPqIwcIz9cXLTEIXsEbR9wAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-17 15:10:39
(9 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack