🇫🇷
pm33
2026-06-21 01:39:02
(17 hours ago)
Wordpress login attempts
Brute-Force
🇫🇷
ELYAZ
2026-06-20 18:57:17
(1 day ago)
(y4) Failed scan -byebye- from 45.3.44.151 (ES/Spain/-): (CF_ENABLE)
Hacking
🇬🇷
setupgr
2026-06-19 22:50:48
(1 day ago)
(mod_security) mod_security (id:900001) triggered by 45.3.44.151 (ES/Spain/Madrid/Madrid/-/[AS200373 ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.44.151 (ES/Spain/Madrid/Madrid/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 20 01:50:47.820860 2026] [security2:error] [pid 79894:tid 79933] [client 45.3.44.151:27931] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: adoro.gr"] [severity "CRITICAL"] [tag "security"] [hostname "adoro.gr"] [uri "/wp-login.php"] [unique_id "ajXHxyc2acK9dyAMRdI8rwAAAUw"], referer: https://adoro.gr/wp-login.php
show less
Port Scan
🇨🇭
TheCoon
2026-06-16 11:45:01
(5 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇲🇽
octageeks.com
2026-06-12 04:06:57
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇬🇷
setupgr
2026-06-11 05:54:19
(1 week ago)
(mod_security) mod_security (id:900001) triggered by 45.3.44.151: 1 in the last 86400 secs; Ports: * ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.44.151: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 08:54:17.091671 2026] [security2:error] [pid 2066679:tid 2066729] [client 45.3.44.151:33001] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.cpanagiotou.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.cpanagiotou.gr"] [uri "/wp-login.php"] [unique_id "aipNie19bB3nUzfQACZOaAAAAZc"], referer: https://mail.cpanagiotou.gr/wp-login.php
show less
Port Scan
🇺🇸
TPI-Abuse
2026-02-26 12:18:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.151 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 07:18:12.230727 2026] [security2:error] [pid 23877:tid 23877] [client 45.3.44.151:59147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.46"] [uri "/.git/config"] [unique_id "aaA6BKPGgzSVOxf7F8N_IwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-18 04:31:40
(4 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-02-18 02:37:49
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.151 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:37:46.167414 2026] [security2:error] [pid 9342:tid 9342] [client 45.3.44.151:20055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reparcol.es"] [uri "/app/.env"] [unique_id "aZUl-v-MRQTQadfee6uMUAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Guardian
2026-02-18 02:13:24
(4 months ago)
Unauthorized attempt to retrieve configuration file (x2)
45.3.44.151 [18/Feb/2026:02:13:23] "GET /.e ...
show more
Unauthorized attempt to retrieve configuration file (x2)
45.3.44.151 [18/Feb/2026:02:13:23] "GET /.env.staging HTTP/1.1"
45.3.44.151 [18/Feb/2026:02:13:23] "GET /api/.env HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 00:50:14
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.151 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:50:06.357930 2026] [security2:error] [pid 16660:tid 16660] [client 45.3.44.151:64561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulpasquali.com"] [uri "/api/.env"] [unique_id "aZUMvlLr80yfPCxqnrH8awAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-10 07:06:18
(5 months ago)
wordpress-trap
Web App Attack
2025-11-13 18:17:40
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/13 12:16:36
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-02-16 09:34:59
(1 year ago)
wordpress-trap
Web App Attack
🇦🇺
MAGIC
2025-01-26 18:00:36
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot