🇫🇷
ELYAZ
2026-06-01 11:31:55
(4 days ago)
(y4) Failed scan -byebye- from 45.3.45.37 (IT/Italy/-): (CF_ENABLE)
Hacking
🇲🇽
octageeks.com
2026-06-01 04:09:22
(5 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇬🇧
spamverify.com
2026-06-01 00:20:58
(5 days ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-05-30 07:11:46
(1 week ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
koinkash.org
2026-05-28 03:39:56
(1 week ago)
They are fraudulent. Malicious threat actor requesting php file /wp-login.php
Web App Attack
🇲🇽
octageeks.com
2026-05-27 04:15:22
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-05-27 01:20:26
(1 week ago)
Web attack blocked by Wordfence on cuypersinvalkenburg.nl (2 hits). Reported by CRMON.
Web App Attack
2026-05-26 08:33:11
(1 week ago)
[ssd5.kdns.gr] httpd-login-spray-site: sites=kostaspriftis.gr; logs=/var/log/httpd/domains/kostaspri ...
show more
[ssd5.kdns.gr] httpd-login-spray-site: sites=kostaspriftis.gr; logs=/var/log/httpd/domains/kostaspriftis.gr.log; samples=site_wide=true | distinct_ips=44 | /wp-login.php
show less
Hacking
Web App Attack
2025-11-01 20:25:30
(7 months ago)
[redacted] 45.3.45.37 - - [01/Nov/2025:21:25:18 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozi ...
show more
[redacted] 45.3.45.37 - - [01/Nov/2025:21:25:18 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/600.3.18 (KHTML, like Gecko) Version/8.0.3 Safari/600.3.18"
[redacted] 45.3.45.37 - - [01/Nov/2025:21:25:20 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/9.1.3 Safari/601.7.8"
[redacted] 45.3.45.37 - - [01/Nov/2025:21:25:21 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/9.1.3 Safari/601.7.8"
[redacted] 45.3.45.37 - - [01/Nov/2025:21:25:22 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_5; en-us) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1"
[redacted] 45.3.45.37 - - [01/Nov/2025:21:25:23 +
...
show less
Hacking
Web App Attack
🇦🇺
AWW-Admin
2025-10-29 13:27:36
(7 months ago)
(wordpress) Failed wordpress login from 45.3.45.37 (IT/Italy/-)
Brute-Force
🇺🇸
TPI-Abuse
2025-02-25 12:46:32
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.45.37 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.45.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 07:46:27.525553 2025] [security2:error] [pid 28989:tid 28989] [client 45.3.45.37:56761] [client 45.3.45.37] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||intersession.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "intersession.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z727o1n6BtwPApEw5xWj_wAAAAE"], referer: https://intersession.net
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-21 14:41:28
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.45.37 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.45.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 21 09:41:23.734411 2025] [security2:error] [pid 23165:tid 23165] [client 45.3.45.37:56065] [client 45.3.45.37] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||asfmglobal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "asfmglobal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7iQkxxA25lfPg6zRMh3ggAAABk"], referer: https://asfmglobal.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-01-22 15:00:32
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇩
Burayot
2025-01-21 07:28:25
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.45.37 (GB/United Kingdom/-): 1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.45.37 (GB/United Kingdom/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-01-13 20:41:34
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.45.37 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.45.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 13 15:41:29.449765 2025] [security2:error] [pid 827699:tid 827699] [client 45.3.45.37:54259] [client 45.3.45.37] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||keyston.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "keyston.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z4V6eeTP2pCyEerETA1f0AAAAAk"], referer: https://keyston.net
show less
Brute-Force
Bad Web Bot
Web App Attack