🇩🇪
KiekerJan
2026-11-07 08:46:06
UTC ·
(3 days ago)
45.3.48.82 - - [07/Nov/2026:09:46:05 +0100] "POST /wp-login.php HTTP/1.1" 404 181 "https://noavandewijdeven.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
45.3.48.82 ...
show more
45.3.48.82 - - [07/Nov/2026:09:46:05 +0100] "POST /wp-login.php HTTP/1.1" 404 181 "https://noavandewijdeven.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
45.3.48.82 - - [07/Nov/2026:09:46:05 +0100] "GET /wp-admin/ HTTP/1.1" 404 181 "https://noavandewijdeven.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇳🇱
Alt255
2026-10-18 10:56:08
UTC ·
(3 weeks ago)
[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.3.48.82 - - [18/Oct/2026:12:55:43 +0200] "GET /.git/config HTTP/1.1" 301 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ...
show more
[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.3.48.82 - - [18/Oct/2026:12:55:43 +0200] "GET /.git/config HTTP/1.1" 301 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-06 15:52:26
UTC ·
(1 month ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.3.48.82 - - [06/Oct/2026:17:51:33 +0200] "GET /laravel/.env.tmp HTTP/1.1" 301 6317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ ...
show more
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.3.48.82 - - [06/Oct/2026:17:51:33 +0200] "GET /laravel/.env.tmp HTTP/1.1" 301 6317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-03 18:21:44
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 3 attempts were recorded from 45.3.48.82
2026-09-03T19:57:12+02:00 vpn Access-Reject 'horizonte' station: 45.3.48.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
...
show more
Unauthorized VPN login attempts: 3 attempts were recorded from 45.3.48.82
2026-09-03T19:57:12+02:00 vpn Access-Reject 'horizonte' station: 45.3.48.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T19:58:47+02:00 vpn Access-Reject 'bilo' station: 45.3.48.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T20:00:39+02:00 vpn Access-Reject 'bonnie' station: 45.3.48.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
Goetz
2026-09-03 09:17:47
UTC ·
(2 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇺🇸
drewf.ink
2026-08-31 15:40:36
UTC ·
(2 months ago)
[15:40] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
Web App Attack
🇺🇸
drewf.ink
2026-08-29 13:39:38
UTC ·
(2 months ago)
[13:39] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
Web App Attack
🇫🇮
as211431.net
2026-08-18 22:04:31
UTC ·
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /index.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /index.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-07-21 02:00:24
UTC ·
(3 months ago)
Banned by SPAMHAUS ASN-DROP list (ASN: 200373)
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-06-18 19:05:03
UTC ·
(4 months ago)
2026/06/18 19:04:04 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇩🇪
Lino Project
2026-03-26 14:00:36
UTC ·
(7 months ago)
45.3.48.82 - - [26/Mar/2026:15:00:30 +0100] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari ...
show more
45.3.48.82 - - [26/Mar/2026:15:00:30 +0100] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
45.3.48.82 - - [26/Mar/2026:15:00:35 +0100] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "https://www.primobio.it/mio-account/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-23 12:31:44
UTC ·
(7 months ago)
Banned by SPAMHAUS ASN-DROP list (ASN: 200373)
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-01-02 22:59:38
UTC ·
(10 months ago)
Auto-ban: >3000 req/min op 2026-01-02
Hacking
Web App Attack
SSH
🇺🇸
myagent.site
2025-12-29 09:14:53
UTC ·
(10 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-29 09:14:16
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:14:13.117478 2025] [security2:error] [pid 4990:tid 4990] [client 45.3.48.82:15423] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:14:13.117478 2025] [security2:error] [pid 4990:tid 4990] [client 45.3.48.82:15423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karturo.com"] [uri "/.git/HEAD"] [unique_id "aVJGZaw_Plr3BYZk-DWMhAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
