🇦🇹
neo72
2026-07-29 11:07:29
(2 days ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
2026-07-29 07:00:00
(2 days ago)
Apache probe; attempts=33; exact paths: /xmlrpc.php
Web App Attack
🇫🇷
ELYAZ
2026-07-24 22:37:35
(1 week ago)
(wordpress) Failed wordpress login from 45.3.43.103 (DE/Germany/-): (CF_ENABLE)
Brute-Force
🇱🇻
garmtech.com
2026-07-24 08:25:54
(1 week ago)
IM360 WAF: Block request to XMLRPC with suspicious referer
Web App Attack
🇩🇪
big-cloud.nl
2026-07-23 15:02:11
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇫🇮
bittiguru.fi
2026-07-22 23:56:10
(1 week ago)
45.3.43.103 - [23/Jul/2026:02:56:02 +0300] "POST /xmlrpc.php HTTP/1.1" 200 250 "https://duckduckgo.c ...
show more
45.3.43.103 - [23/Jul/2026:02:56:02 +0300] "POST /xmlrpc.php HTTP/1.1" 200 250 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "1.73"
45.3.43.103 - [23/Jul/2026:02:56:10 +0300] "POST /xmlrpc.php HTTP/1.1" 200 250 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "1.73"
...
show less
Hacking
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-07-21 01:13:35
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇫🇷
mikekarl
2026-06-11 22:08:41
(1 month ago)
SQL INJECTION 3'')%E%x%T%r%a%c%T%V%A%l%U%e%(%1%3%8%4%,%/%*%!%5%0%0%0%0%c%o%N%C%a%t%*%/%(%0%x%7%E%,%( ...
show more
SQL INJECTION 3'')%E%x%T%r%a%c%T%V%A%l%U%e%(%1%3%8%4%,%/%*%!%5%0%0%0%0%c%o%N%C%a%t%*%/%(%0%x%7%E%,%(%/%*%!%5%0%0%0%0%s%E%l%E%c%t%*%/%/%*%*%/%(%E%l%T%(%1%3%8%4%=%1%3%8%4%,%1%)%)%)%,%0%X%7%E%)%) AND ''1''=''1
show less
SQL Injection
🇫🇷
mikekarl
2026-06-11 21:01:36
(1 month ago)
SQL INJECTION 167'')%e%x%T%r%a%C%T%V%A%L%U%E%(%7%5%4%0%,%/%*%!%5%0%0%0%0%C%o%n%c%a%T%*%/%(%0%x%7%E%, ...
show more
SQL INJECTION 167'')%e%x%T%r%a%C%T%V%A%L%U%E%(%7%5%4%0%,%/%*%!%5%0%0%0%0%C%o%n%c%a%T%*%/%(%0%x%7%E%,%(%/%*%!%5%0%0%0%0%s%e%L%E%c%t%*%/%/%*%*%/%(%E%L%t%(%7%5%4%0%=%7%5%4%0%,%1%)%)%)%,%0%x%7%e%)%) AND ''1''=''1
show less
SQL Injection
🇩🇪
LRob
2026-06-11 15:30:03
(1 month ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 03:28:24
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.103 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:28:18.667498 2026] [security2:error] [pid 5552:tid 5552] [client 45.3.43.103:12171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riser-astrology.com"] [uri "/wp/.git/config"] [unique_id "aZUx0riyNlstO544vLLeEQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 02:23:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.103 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:23:13.334638 2026] [security2:error] [pid 25275:tid 25275] [client 45.3.43.103:62047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reneehill.net"] [uri "/api/.env"] [unique_id "aZUikQAVOFwvEHKXYCKGAQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-18 02:05:38
(5 months ago)
Scanning/Probing (23)
Brute-Force
Web App Attack
🇳🇱
jjnxpct
2026-02-11 04:53:31
(5 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /v2/.git/config (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 18:03:37
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.43.103 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.43.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 13:03:28.880450 2026] [security2:error] [pid 3841:tid 3841] [client 45.3.43.103:56697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aoklandco.com"] [uri "/.git/config"] [unique_id "aYty8DeCGElBkl4k7e94VQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack