2026-05-12 23:05:37
(3 weeks ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇩🇪
Ad Ministrator
2026-04-23 22:26:02
(1 month ago)
RdpGuard detected brute-force attempt on RD-WEB
Brute-Force
🇩🇪
LRob.fr
2026-04-20 05:30:03
(1 month ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-04-19 04:06:21
(1 month ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇩🇪
london2038.com
2026-04-19 02:15:39
(1 month ago)
Detected by WP fail2ban
2026-04-19T04:15:38.044725+02:00 wordpress: XML-RPC authentication attempt f ...
show more
Detected by WP fail2ban
2026-04-19T04:15:38.044725+02:00 wordpress: XML-RPC authentication attempt from 45.3.37.183
show less
Brute-Force
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇵🇱
IROK
2026-02-24 09:08:33
(3 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
🇺🇸
TPI-Abuse
2026-02-24 03:55:52
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.37.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.37.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 22:55:45.808450 2026] [security2:error] [pid 14252:tid 14252] [client 45.3.37.183:10149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whirlpool.pamplonaserviciotecnico.com"] [uri "/.git/config"] [unique_id "aZ0hQSNo3wxwG3EQMiZ2BAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 22:55:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.37.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.37.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 17:54:59.614984 2026] [security2:error] [pid 31306:tid 31335] [client 45.3.37.183:26091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "potonthefire.andyboynton.com"] [uri "/.git/config"] [unique_id "aZzaw2LKhDOhvS9tWBpq1gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tilellit.pro
2026-02-03 05:25:07
(4 months ago)
Fail2Ban banned 45.3.37.183 for security violations in jail wp-armour. Log: 2026/02/03 05:25:07 [err ...
show more
Fail2Ban banned 45.3.37.183 for security violations in jail wp-armour. Log: 2026/02/03 05:25:07 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.3.37.183 | Target: wpregistration" , client: 45.3.37.183, server: [REDACTED], request: "POST /wp-login.php?action=register HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://espsformacion.com/wp-login.php?action=register"
...
show less
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-12-31 00:58:11
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇨🇭
backslash
2025-12-08 03:45:02
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-11-26 17:08:25
(6 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2025-11-24 07:46:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.37.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.37.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:46:15.010176 2025] [security2:error] [pid 32109:tid 32109] [client 45.3.37.183:60349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.genevaatlantic.com"] [uri "/.svn/wc.db"] [unique_id "aSQNRyxWcapVGl2vPy7LpQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:51:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.37.183 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.37.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:51:24.542796 2025] [security2:error] [pid 31119:tid 31119] [client 45.3.37.183:56971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vrevgaming.net"] [uri "/.env"] [unique_id "aSPkTLwYv8yGX5Ci6o7hsQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack