This IP address has been reported a total of
11
times from
8 distinct
sources.
45.3.41.215 was first reported on
December 14th 2024 , and the most recent report was
1 day ago Germany
with 1
report.
The only category in these recent reports was:
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
big-cloud.nl
2026-10-26 19:06:09
(1 day ago)
Try to access /xmlrpc.php
Web App Attack
🇮🇹
VHosting
2026-08-22 23:15:06
(2 months ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-07-29 05:23:02
(2 months ago)
IM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:0
Hacking
🇺🇸
mnsf
2026-05-28 22:05:42
(4 months ago)
Scanning/Probing (34)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-05-25 11:05:36
(5 months ago)
Scanning/Probing (34)
Brute-Force
Web App Attack
🇬🇧
PeravixGroup
2026-05-07 11:56:30
(5 months ago)
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ...
show more
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇪🇸
10dencehispahard SL
2026-01-28 05:38:42
(9 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2025-11-02 22:22:52
(11 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 07:26:03
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-01-26 22:30:22
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.41.215 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.41.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 26 17:30:18.638118 2025] [security2:error] [pid 24367:tid 24367] [client 45.3.41.215:46015] [client 45.3.41.215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||imageries.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "imageries.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z5a3eiQBVQMxQmuo_FL24wAAAAw"], referer: https://imageries.net
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-12-16 09:28:52
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.41.215 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.41.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 16 04:28:44.848151 2024] [security2:error] [pid 22145:tid 22215] [client 45.3.41.215:48639] [client 45.3.41.215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wdmtexas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wdmtexas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1_yzJt1CO6yDBRnuuyKbgAAAFg"], referer: https://wdmtexas.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-12-14 08:27:28
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.41.215 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.41.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 14 03:27:22.638878 2024] [security2:error] [pid 6277:tid 6277] [client 45.3.41.215:53147] [client 45.3.41.215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cormanleigh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cormanleigh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z11Bauttis1vvSRbpfjYfQAAAAo"], referer: https://cormanleigh.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
11
of 11 reports
