🇲🇽
octageeks.com
2026-07-18 04:17:53
(9 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
bpolson
2026-07-18 04:09:16
(9 hours ago)
WordPress Hacking/Scanning. (s1)
Hacking
Web App Attack
🇬🇷
setupgr
2026-07-15 21:18:41
(2 days ago)
(wplogin_block) Blocked WP-Login Access Attempt 45.3.53.19 (BR/Brazil/São Paulo/São Paulo/-/[AS200 ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 45.3.53.19 (BR/Brazil/São Paulo/São Paulo/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.3.53.19 - - [16/Jul/2026:00:16:03 +0300] "POST /wp-login.php HTTP/1.1" 302 - "https://cpanagiotou.gr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
show less
Port Scan
🇺🇸
nationaleventpros.com
2026-07-13 16:35:26
(4 days ago)
WordPress login attempt
Brute-Force
🇫🇮
inlink.ltd
2026-07-12 03:17:09
(6 days ago)
Known malicious PHP file or CMS probe
Web App Attack
2026-07-10 16:08:38
(1 week ago)
[ns65.kdns.gr] httpd-login-spray-site: sites=www.iason-ceramics.gr; logs=/var/log/httpd/domains/iaso ...
show more
[ns65.kdns.gr] httpd-login-spray-site: sites=www.iason-ceramics.gr; logs=/var/log/httpd/domains/iason-ceramics.gr.log; samples=site_wide=true | distinct_ips=20 | /wp-login.php
show less
Hacking
Web App Attack
2026-07-08 04:23:43
(1 week ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇫🇷
pm33
2026-07-01 18:43:09
(2 weeks ago)
Wordpress login attempts
Brute-Force
🇲🇽
octageeks.com
2026-06-30 04:24:32
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-06-29 14:33:57
(2 weeks ago)
[ns31.kdns.gr] httpd-login-spray-site: sites=stagia.gr; logs=/var/log/httpd/domains/stagia.gr.log; s ...
show more
[ns31.kdns.gr] httpd-login-spray-site: sites=stagia.gr; logs=/var/log/httpd/domains/stagia.gr.log; samples=site_wide=true | distinct_ips=12 | /wp-login.php
show less
Hacking
Web App Attack
🇫🇷
✨
2026-06-29 00:53:18
(2 weeks ago)
Domain : trevalgascottages.co.uk
Rule : wp-login
2026-06-29 00:33:52 ***hidden-privacy*** POST /wp-l ...
show more
Domain : trevalgascottages.co.uk
Rule : wp-login
2026-06-29 00:33:52 ***hidden-privacy*** POST /wp-login.php - 443 - 45.3.53.19 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 https://trevalgascottages.co.uk/wp-login.php trevalgascottages.co.uk 404 0 64 0 890 290 - -
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-28 02:29:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.19 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 21:29:46.539452 2025] [security2:error] [pid 22966:tid 22966] [client 45.3.53.19:43225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "j3ee.com"] [uri "/.env"] [unique_id "aVCWGiauVKIlYMbnog7dmQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 23:31:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.19 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 18:31:43.432970 2025] [security2:error] [pid 386:tid 386] [client 45.3.53.19:23379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biomechanicalwars.com"] [uri "/.env"] [unique_id "aVBsX9Q1dgjZlB5Rq569dQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 21:04:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.19 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 16:04:14.095351 2025] [security2:error] [pid 15940:tid 15940] [client 45.3.53.19:54095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lazymanvegan.com"] [uri "/.env"] [unique_id "aVBJzk0kSTZBjik1M7A5RwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 18:25:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.19 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:24:56.162177 2025] [security2:error] [pid 12540:tid 12540] [client 45.3.53.19:40917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "retiredexecutivetravel.com"] [uri "/.svn/wc.db"] [unique_id "aVAkeJioKlnWWnVrlVsipwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack