🇬🇧
relianoid.com
2026-08-24 05:29:00
(2 days ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2026-08-16 11:21:04
(1 week ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
TAY
2026-06-14 07:39:33
(2 months ago)
45.3.47.252 - - [14/Jun/2026:15:39:30 +0800] "GET /wp-content/plugins/wp-swimteam/include/user/downl ...
show more
45.3.47.252 - - [14/Jun/2026:15:39:30 +0800] "GET /wp-content/plugins/wp-swimteam/include/user/download.php?file=..%2F..%2F..%2F..%2F..%2Fwp-config.php HTTP/1.1" 301 619 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
45.3.47.252 - - [14/Jun/2026:15:39:31 +0800] "GET /wp-content/plugins/wp-table/js/wptable-button.phpp?wpPATH=..%2F..%2F..%2F..%2Fwp-config.php HTTP/1.1" 301 601 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
45.3.47.252 - - [14/Jun/2026:15:39:32 +0800] "GET /wp-content/plugins/wp-with-spritz/wp.spritz.content.filter.php?url=..%2F..%2F..%2Fwp-config.php HTTP/1.1" 301 609 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
...
show less
Brute-Force
🇵🇱
dcnet
2026-03-08 00:00:00
(5 months ago)
SSL VPN brute force credential stuffing on FortiGate 100F - 3 failed login attempts (unknown users) ...
show more
SSL VPN brute force credential stuffing on FortiGate 100F - 3 failed login attempts (unknown users) over 7 days (2026-03-01 to 2026-03-08)
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-02-21 19:08:23
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 14:08:18.253888 2026] [security2:error] [pid 30410:tid 30410] [client 45.3.47.252:39417] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||penninesolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "penninesolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZoCom4wY5KbksEd1NpARgAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
mgarofano80
2026-01-20 10:53:51
(7 months ago)
Brute-Force
Web App Attack
🇨🇴
adalbertoreyes.org
2025-11-26 18:49:37
(8 months ago)
CategoryPortScan
Port Scan
🇺🇸
TPI-Abuse
2025-11-26 12:19:32
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:19:27.677219 2025] [security2:error] [pid 20119:tid 20119] [client 45.3.47.252:38127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genies-bottle.nmorganist.org"] [uri "/.env"] [unique_id "aSbwT1B_puDJDkTvYzAuAgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:26:11
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:26:06.143871 2025] [security2:error] [pid 31843:tid 31843] [client 45.3.47.252:57459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.americanlegion935.com"] [uri "/.env"] [unique_id "aSadfqhMfJMb5U_dYgltAQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:11:12
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:11:04.684980 2025] [security2:error] [pid 27186:tid 27186] [client 45.3.47.252:30645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.curtbeams.com"] [uri "/.env"] [unique_id "aSZTqJqVhK5wv05g2e0qsAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-25 23:16:28
(9 months ago)
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ...
show more
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇩🇪
Holger
2025-11-25 07:52:33
(9 months ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:13:53
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:13:43.900597 2025] [security2:error] [pid 30992:tid 31066] [client 45.3.47.252:48575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.slingshotpro.com"] [uri "/.env"] [unique_id "aSVXJwiHdlTmqu0bsgswDAAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:57:09
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:56:59.099079 2025] [security2:error] [pid 6334:tid 6334] [client 45.3.47.252:19759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.k4uu.com"] [uri "/.env"] [unique_id "aSQPy4ZI_mbq4p9srMSBjwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:20:39
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:20:34.588983 2025] [security2:error] [pid 3862:tid 3862] [client 45.3.47.252:13573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bccoa.net"] [uri "/.svn/wc.db"] [unique_id "aSQHQvNaifnylcp3KCqKrgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack