🇩🇪
joharikop
2026-07-31 15:05:57
(20 hours ago)
Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes ...
show more
Nginx: WordPress/CMS probe (wp-admin, wp-login, xmlrpc). Automated ban via fail2ban nginx-cms-probes jail.
show less
Web App Attack
2026-02-20 05:45:25
(5 months ago)
Failed Wordpress login
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 01:26:18
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:26:13.512892 2026] [security2:error] [pid 5904:tid 5904] [client 45.3.46.255:17775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kamrynbever.com"] [uri "/app/.env"] [unique_id "aZZmtYF3L-L-EyhEtcpLTwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 12:35:55
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:35:49.484059 2026] [security2:error] [pid 9085:tid 9085] [client 45.3.46.255:34169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wedeliverstrippers.com"] [uri "/api/.env"] [unique_id "aZWyJW76uo9_4ZZxQdPz7QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 01:13:37
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 20:13:30.197604 2026] [security2:error] [pid 15493:tid 15493] [client 45.3.46.255:21913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pembrokefinance.com"] [uri "/backend/.env"] [unique_id "aZUSOr5PjRItijSJ2BkTCwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 00:47:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:47:03.103691 2026] [security2:error] [pid 2923291:tid 2923291] [client 45.3.46.255:16929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pattifox.com"] [uri "/admin/.env"] [unique_id "aZUMB-xgVLtieOFhHxrkKgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-28 17:42:21
(6 months ago)
WP Login Scan Activities
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 11:32:48
(6 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2026-01-13 12:39:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 07:39:19.870380 2026] [security2:error] [pid 5920:tid 5920] [client 45.3.46.255:16747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keyspring-niseko.com"] [uri "/.svn/wc.db"] [unique_id "aWY891BckfTbFimEmGsp1QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-21 18:39:44
(8 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/21 12:35:19
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇫🇷
tecnicorioja
2025-10-01 10:00:59
(10 months ago)
Failed password for invalid user Oct 01 10:05:02 port 11951
Brute-Force
SSH
2025-03-21 09:51:33
(1 year ago)
(smtpauth) Failed SMTP AUTH login from 45.3.46.255 (DE/Germany/-): 1 in the last 3600 secs; Ports: * ...
show more
(smtpauth) Failed SMTP AUTH login from 45.3.46.255 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2025-03-21 02:49:28 plain authenticator failed for ([138.201.30.232]) [45.3.46.255]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
🇺🇸
hostseries
2025-03-20 13:40:44
(1 year ago)
Brute-force cPanel Services
Brute-Force
🇩🇪
XICTRON
2024-12-12 11:30:36
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host