|
🇲🇽
octageeks.com
|
|
Wordpress malicious attack:[octaflood]
|
Web App Attack
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
|
Exploited Host
Web App Attack
|
|
🇮🇹
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-07-15 05:34:56,077 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.132.227.45 - 2026-07-15 05:34:55cloudlinux2 fail2ban: 2026-07-15 05:34:55,579 fail2ban.filter [1812]: INFO [plesk-wordpress] F ...
show more
cloudlinux2 fail2ban: 2026-07-15 05:34:56,077 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.132.227.45 - 2026-07-15 05:34:55cloudlinux2 fail2ban: 2026-07-15 05:34:55,579 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.132.227.47 - 2026-07-15 05:34:55cloudlinux2 fail2ban: 2026-07-15 05:35:10,426 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.3.44.165 - 2026-07-15 05:35:09cloudlinux2 fail2ban: 2026-07-15 05:35:09,325 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.3.44.164 - 2026-07-15 05:35:08cloudlinux2 fail2ban: 2026-07-15 05:35:11,532 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.3.44.109 - 2026-07-15 05:35:10cloudlinux2 fail2ban: 2026-07-15 05:35:30,782 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.8.19.2 - 2026-07-15 05:35:28cloudlinux2 fail2ban: 2026-07-15 05:35:30,905 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.92.229.78 - 2026-07-15 05:35:28cloudlinux2 fail2ban
show less
|
Web App Attack
|
|
🇮🇹
Progetto1
|
|
Website Scanning / Scraping
|
Bad Web Bot
Exploited Host
Web App Attack
|
|
🇺🇸
IndigoRidge
|
|
45.3.44.109 - - [11/Jul/2026:19:50:23 -0400] "POST /wp-login.php HTTP/1.0" 200 12514 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:24 -0400 ...
show more
45.3.44.109 - - [11/Jul/2026:19:50:23 -0400] "POST /wp-login.php HTTP/1.0" 200 12514 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:24 -0400] "POST /wp-login.php HTTP/1.0" 200 12530 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:25 -0400] "POST /wp-login.php HTTP/1.0" 200 12514 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:26 -0400] "POST /wp-login.php HTTP/1.0" 200 12530 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:27 -0400] "POST /wp-login.php HTTP/1.0" 200 12514 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:13
...
show less
|
Web App Attack
|
|
🇺🇸
cwytech
|
|
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
tecnicorioja
|
|
wp-login attack [29/Jun/2026:07:28:13
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.
|
Web App Attack
|
|
🇬🇷
setupgr
|
|
(mod_security) mod_security (id:900001) triggered by 45.3.44.109 (ES/Spain/Madrid/Madrid/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 07:54:26.932672 2026] [security2:err ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.44.109 (ES/Spain/Madrid/Madrid/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 07:54:26.932672 2026] [security2:error] [pid 357904:tid 357949] [client 45.3.44.109:28531] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.babis.photo"] [severity "CRITICAL"] [tag "security"] [hostname "mail.babis.photo"] [uri "/wp-login.php"] [unique_id "ajy0gko5pHjF0H7EeFM-6wAAAEM"], referer: https://mail.babis.photo/wp-login.php
show less
|
Port Scan
|
|
🇺🇸
omc
|
|
AH01797: Unauthorized file
|
Bad Web Bot
|
|
🇫🇷
ELYAZ
|
|
(y4) Failed scan -byebye- from 45.3.44.109 (ES/Spain/-): (CF_ENABLE)
|
Hacking
|
|
🇺🇸
rsa
|
|
wp-login.php
|
DDoS Attack
Brute-Force
Web App Attack
Hacking
|
|
🇫🇷
ELYAZ
|
|
(y4) Failed scan -byebye- from 45.3.44.109 (ES/Spain/-): (CF_ENABLE)
|
Hacking
|
|
🇫🇷
pm33
|
|
Wordpress login attempts
|
Brute-Force
|
|
🇺🇸
xmission.com
|
|
45.3.44.109 - - [16/Jun/2026:14:46:01 -0600] "POST /xmlrpc.php HTTP/1.1" 200 413 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
...
|
Web App Attack
|
