🇫🇷
Tilellit.PRO
2026-07-08 12:41:20
(23 hours ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇩🇪
big-cloud.nl
2026-07-08 11:01:35
(1 day ago)
Try to access /xmlrpc.php
Web App Attack
2026-07-07 06:06:26
(2 days ago)
Trying to access config files
Web App Attack
🇲🇽
octageeks.com
2026-07-06 04:17:43
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-07-03 22:34:29
(5 days ago)
[server.tmg.gr] httpd-login-spray-site: sites=www.cardioathena2022.gr; logs=/var/log/httpd/domains/c ...
show more
[server.tmg.gr] httpd-login-spray-site: sites=www.cardioathena2022.gr; logs=/var/log/httpd/domains/cardioathena2022.gr.log; samples=site_wide=true | distinct_ips=32 | /wp-login.php
show less
Hacking
Web App Attack
2026-07-03 18:44:52
(5 days ago)
Web attack blocked by Wordfence on mezzia.nl (2 hits). Reported by CRMON.
Web App Attack
2026-06-30 09:56:57
(1 week ago)
[ns19.kdns.gr] httpd-login-spray-site: sites=t-support.gr; logs=/var/log/httpd/domains/t-support.gr. ...
show more
[ns19.kdns.gr] httpd-login-spray-site: sites=t-support.gr; logs=/var/log/httpd/domains/t-support.gr.log; samples=site_wide=true | distinct_ips=32 | /wp-login.php
show less
Hacking
Web App Attack
2026-06-25 11:36:23
(2 weeks ago)
[server.tmg.gr] httpd-login-spray-site: sites=geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; ...
show more
[server.tmg.gr] httpd-login-spray-site: sites=geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; samples=site_wide=true | distinct_ips=12 | /wp-login.php
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 19:42:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 15:41:53.944673 2026] [security2:error] [pid 10305:tid 10305] [client 45.3.49.46:61601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.trafficstopper.com"] [uri "/.svn/wc.db"] [unique_id "aiR4ASKtQvF0w0ke85DsOQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
Fn4ticHz
2026-05-08 22:59:13
(2 months ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇨🇭
4server
2026-04-27 14:34:10
(2 months ago)
[MonApr2716:34:06.9615812026][security2:error][pid4112744:tid4113017][client45.3.49.46:0]ModSecurity ...
show more
[MonApr2716:34:06.9615812026][security2:error][pid4112744:tid4113017][client45.3.49.46:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.4server.ch\"][uri\"/.aws/credentials\"][unique_id\"ae9z3rRJvSp3i6uNQGpyWQAAARE\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-01-02 22:09:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 17:09:45.686803 2026] [security2:error] [pid 5718:tid 5718] [client 45.3.49.46:21245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "customdatasolutions.net.pjvcds.com"] [uri "/.git/HEAD"] [unique_id "aVhCKQG1sTGMjiQBPmwTuAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-02 19:23:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 14:23:26.945596 2026] [security2:error] [pid 781:tid 781] [client 45.3.49.46:50815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.shafoo.com.sentientresearch.com"] [uri "/.svn/wc.db"] [unique_id "aVgbLlLUiM02bVOW8GDGcQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-30 12:22:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 07:21:51.087866 2025] [security2:error] [pid 13110:tid 13110] [client 45.3.49.46:60295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.trafficstopper.com"] [uri "/.git/HEAD"] [unique_id "aVPD33edqXyVX9ZrnSDBBgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 08:39:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.49.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:39:47.235426 2025] [security2:error] [pid 4566:tid 4566] [client 45.3.49.46:42865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wbcsnet.com"] [uri "/.env"] [unique_id "aVI-U_8ObWtfxNzYY5ScTQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack