|
🇺🇸
Richard Stover
|
|
User tried to login as "admin."
|
Web App Attack
|
|
|
🇫🇷
ELYAZ
|
|
(y4) Failed scan -byebye- from 45.3.47.254 (FR/France/-): (CF_ENABLE)
|
Hacking
|
|
|
🇨🇿
ddw
|
|
WordPress Brute Force Attack.
|
Hacking
Brute-Force
Web App Attack
|
|
|
🇫🇷
tilellit.pro
|
|
Fail2Ban banned 45.3.47.254 for security violations in jail wp-armour. Log: 2026/05/30 03:44:14 [err ...
show more
Fail2Ban banned 45.3.47.254 for security violations in jail wp-armour. Log: 2026/05/30 03:44:14 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.3.47.254 | Target: wplogin" , client: 45.3.47.254, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
|
Web Spam
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:34:08.463077 2025] [security2:error] [pid 22530:tid 22530] [client 45.3.47.254:26703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.androglicksman.com"] [uri "/.env"] [unique_id "aSa7gD2PF83YwAeyAzOVKQAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:38:42.841245 2025] [security2:error] [pid 8103:tid 8103] [client 45.3.47.254:37407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bioterrorismbooks.info"] [uri "/.git/HEAD"] [unique_id "aSVO8oDSRk9oQfVGXaSYtQAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:13:03.334443 2025] [security2:error] [pid 24724:tid 24724] [client 45.3.47.254:35213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.novoventanet.scala-global.com"] [uri "/.svn/wc.db"] [unique_id "aSU63w4ToAQJglN5lm7RPAAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:10:37.520658 2025] [security2:error] [pid 3488:tid 3488] [client 45.3.47.254:39451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.toyz.net"] [uri "/.svn/wc.db"] [unique_id "aSUsPe9CQsEqjAOK5CVVmQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:58:40.116240 2025] [security2:error] [pid 18615:tid 18615] [client 45.3.47.254:31599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbfitwell.com"] [uri "/.env"] [unique_id "aSUbYEgYyrA_VCXA5TGHJwAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
hostseries
|
|
Brute-force cPanel Services
|
Brute-Force
|
|
|
🇨🇭
backslash
|
|
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
|
Bad Web Bot
|
|
|
🇩🇪
dpsbs
|
|
multiple ips intrustions detected
|
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.47.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 14 20:07:47.724312 2024] [security2:error] [pid 31025:tid 31031] [client 45.3.47.254:48855] [client 45.3.47.254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||killyourattitude.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "killyourattitude.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z14r4yU66R72bKGpaiE3QAAAAQQ"], referer: https://killyourattitude.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|