🇬🇷
setupgr
2026-06-16 22:53:23
(4 hours ago)
(mod_security) mod_security (id:900001) triggered by 45.3.43.22: 1 in the last 86400 secs; Ports: *; ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.43.22: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 01:53:21.995510 2026] [security2:error] [pid 2210176:tid 2210249] [client 45.3.43.22:11405] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: asteriassantorini.com"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/wp-login.php"] [unique_id "ajHT4Y0pb6dkgQfaMdDR9wAAAQI"], referer: https://asteriassantorini.com/wp-login.php
show less
Port Scan
🇬🇧
openstrike.co.uk
2026-06-16 05:15:08
(22 hours ago)
11 attacks on config grabbing URLs (type 2), VC URLs, env grabbing URLs, PHP URLs, password grabbing ...
show more
11 attacks on config grabbing URLs (type 2), VC URLs, env grabbing URLs, PHP URLs, password grabbing URLs:
GET /config/secrets.yml HTTP/1.1
GET /.git/config HTTP/1.1
GET /.env.production HTTP/1.1
GET /fetch?url=http%3A%2F%2Flocalhost%3A8080%2Fdatabase.php&uri=http%3A%2F%2Flocalhost%3A8080%2Fdatabase.php&path=http%3A%2F%2Flocalhost%3A8080%2Fdatabase.php HTTP/1.1
GET /.aws/credentials HTTP/1.1
show less
Hacking
Web App Attack
🇫🇷
tecnicorioja
2026-06-13 22:01:11
(3 days ago)
wp-login attack [13/Jun/2026:03:26:16
Brute-Force
Web App Attack
🇫🇷
ELYAZ
2026-06-12 01:50:28
(5 days ago)
(y4) Failed scan -byebye- from 45.3.43.22 (DE/Germany/-): (CF_ENABLE)
Hacking
🇲🇹
Malta
2026-06-11 22:55:25
(5 days ago)
45.3.43.22 - - [12/Jun/2026:00:55:24 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; I ...
show more
45.3.43.22 - - [12/Jun/2026:00:55:24 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇬🇧
PeravixGroup
2026-06-09 21:22:07
(1 week ago)
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ...
show more
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
2026-06-09 17:06:04
(1 week ago)
Trying to access config files
Web App Attack
🇪🇸
sshtmp
2026-05-25 16:04:00
(3 weeks ago)
[AbuseIPDB auto-report]
Attack: WordPress wp-login brute-force
Hits: 1 | First: 2026-05-25T18:04:00+ ...
show more
[AbuseIPDB auto-report]
Attack: WordPress wp-login brute-force
Hits: 1 | First: 2026-05-25T18:04:00+02:00 | Last: 2026-05-25T18:04:00+02:00
Samples: GET /wp-login.php [500]
show less
Brute-Force
Web App Attack
🇫🇮
inlink.ltd
2026-05-19 22:30:31
(4 weeks ago)
Known malicious PHP file or CMS probe
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-18 21:59:15
(4 weeks ago)
Auto-ban: >3000 req/min op 2026-05-18
Web App Attack
SSH
Hacking
2026-05-11 23:16:41
(1 month ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇧🇪
cmbplf
2026-05-07 04:30:21
(1 month ago)
517 requests with url.path *.env
Brute-Force
Bad Web Bot
🇩🇪
big-cloud.nl
2026-03-27 02:51:44
(2 months ago)
Try to access /app/.git/config
Web App Attack
🇮🇩
Burayot
2026-03-27 00:17:59
(2 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.43.22 (DE/Germany/-): 1 in the ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.43.22 (DE/Germany/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 08:24:41
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.3.43.22 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.43.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 03:24:37.137709 2026] [security2:error] [pid 21481:tid 21481] [client 45.3.43.22:59857] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cobbwebb.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cobbwebb.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgaRYEiAzU4WmVLTcgOXAAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack