🇨🇿
lp
2026-09-03 22:50:23
(43 minutes ago)
Unauthorized VPN login attempts: 5 attempts were recorded from 45.3.34.52
2026-09-03T23:33:35+02:00 ...
show more
Unauthorized VPN login attempts: 5 attempts were recorded from 45.3.34.52
2026-09-03T23:33:35+02:00 vpn Access-Reject 'henk' station: 45.3.34.52 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T23:35:12+02:00 vpn Access-Reject 'miranda' station: 45.3.34.52 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T23:36:49+02:00 vpn Access-Reject 'anabela' station: 45.3.34.52 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T23:38:33+02:00 vpn Access-Reject 'posto1' station: 45.3.34.52 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T23:40:15+02:00 vpn Access-Reject 'ana' station: 45.3.34.52 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> =
show less
Brute-Force
Web App Attack
🇪🇸
librebit
2026-06-25 05:12:20
(2 months ago)
Brute force
Brute-Force
🇫🇮
inlink.ltd
2026-05-25 10:58:22
(3 months ago)
Known malicious PHP file or CMS probe
Web App Attack
2026-03-28 03:58:18
(5 months ago)
Forum/form spam
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:32
(8 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇩🇪
F242
2025-12-29 00:57:14
(8 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
2025-12-04 10:49:29
(8 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-02 23:10:42
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.52 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 18:10:34.788582 2025] [security2:error] [pid 23250:tid 23276] [client 45.3.34.52:56663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digital4z.com"] [uri "/.env"] [unique_id "aS9x6izmSHqtIQJm41O-QQAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 11:37:56
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.52 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 06:37:48.919381 2025] [security2:error] [pid 25149:tid 25149] [client 45.3.34.52:47229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wintercypher.com"] [uri "/.git/HEAD"] [unique_id "aS7PjCbnxgVyxEb56dHIzAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2025-12-02 05:55:34
(9 months ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-12-02 05:52:47
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.34.52 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.34.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:52:40.434254 2025] [security2:error] [pid 7257:tid 7257] [client 45.3.34.52:20549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bradleymackenzie.com"] [uri "/.env"] [unique_id "aS5-qJ4XEA3a3CbgyiuO1gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2025-12-02 03:19:37
(9 months ago)
tcp/80 (18 or more attempts)
Port Scan
🇩🇪
tinect
2025-11-25 21:34:01
(9 months ago)
This IP was detected by CrowdSec triggering tinect/http-sensitive-file-probe
Web App Attack
2025-11-14 02:03:05
(9 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2025-10-20 16:45:22
(10 months ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection