🇲🇽
octageeks.com
2026-07-12 04:24:08
(9 hours ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇨🇿
ddw
2026-07-11 05:56:29
(1 day ago)
WordPress Brute Force Attack.
Hacking
Brute-Force
Web App Attack
🇺🇸
lostswordfish.com
2026-07-10 09:02:04
(2 days ago)
Wordfence waf block on lostswordfish
Web App Attack
🇫🇷
ELYAZ
2026-06-25 06:31:47
(2 weeks ago)
(y4) Failed scan -byebye- from 45.3.45.244 (IT/Italy/-): (CF_ENABLE)
Hacking
2026-01-05 20:36:49
(6 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-11-24 09:19:37
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:19:28.376408 2025] [security2:error] [pid 27513:tid 27513] [client 45.3.45.244:23393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cms2020.com"] [uri "/.git/HEAD"] [unique_id "aSQjIDzwlzOshrFtyZn4eQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:01:52
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:01:48.321790 2025] [security2:error] [pid 21029:tid 21029] [client 45.3.45.244:24955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kelvinlouie.com"] [uri "/.env"] [unique_id "aSQe_BxjfnEAaQ7FPw6RZAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:11:25
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:11:20.074092 2025] [security2:error] [pid 947:tid 947] [client 45.3.45.244:33679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.michaelmoorefield.com"] [uri "/.svn/wc.db"] [unique_id "aSQFGFrDE85zbXqEsVAC5wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:50:42
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:49:28.316747 2025] [security2:error] [pid 26333:tid 26333] [client 45.3.45.244:53657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.roommategames.com"] [uri "/.svn/wc.db"] [unique_id "aSPj2JrWqRxje1G1lnt53AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-21 18:28:51
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/21 12:20:41
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-10-15 18:39:32
(8 months ago)
Failed Wordpress login
Hacking
Brute-Force
Web App Attack
2025-02-22 06:01:33
(1 year ago)
wordpress-trap
Web App Attack
🇦🇺
MAGIC
2025-02-20 20:29:25
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2025-01-09 07:45:05
(1 year ago)
Attempted WordPress login:
45.3.45.244 - - [09/Jan/2025:07:36:41 +0000] "POST /wp-login.php HTTP/1. ...
show more
Attempted WordPress login:
45.3.45.244 - - [09/Jan/2025:07:36:41 +0000] "POST /wp-login.php HTTP/1.1" 404 249 "https://[sub domain]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-12-31 20:13:32
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.45.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 31 15:13:26.532740 2024] [security2:error] [pid 1731765:tid 1731765] [client 45.3.45.244:58425] [client 45.3.45.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mspish.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mspish.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z3RQZgS-DqfuOg388kkt0wAAAAU"], referer: https://mspish.com
show less
Brute-Force
Bad Web Bot
Web App Attack