2026-08-25 02:26:15
(3 days ago)
2026-08-25T02:26:15.046416+00:00 instance-20260804-1025 wordpress(netal.co)[490986]: XML-RPC authent ...
show more
2026-08-25T02:26:15.046416+00:00 instance-20260804-1025 wordpress(netal.co)[490986]: XML-RPC authentication attempt for unknown user [email protected] from 45.3.53.241
...
show less
Web App Attack
🇫🇷
Sklurk
2026-08-04 03:08:22
(3 weeks ago)
Web App Attack
Web App Attack
🇮🇹
VHosting
2026-08-03 18:25:02
(3 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇱
i-turnradio.nl
2026-07-01 08:00:39
(1 month ago)
2026-07-01 @ 10:00:38 (CET) ~ Blocked for trying to access: /wp-login.php
Web App Attack
🇦🇺
oncord
2026-03-19 18:25:23
(5 months ago)
Form spam
Web Spam
🇺🇸
ezsystems.com
2026-03-18 00:44:42
(5 months ago)
Web Spam
🇦🇺
oncord
2026-03-16 08:27:05
(5 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-15 18:33:14
(6 months ago)
Form spam
Web Spam
2026-02-15 13:17:04
(6 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-02-15 12:31:02
(6 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:48:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:47:57.289962 2026] [security2:error] [pid 636:tid 636] [client 45.3.53.241:48909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pagewideprinting.com"] [uri "/v2/.git/config"] [unique_id "aZGybRluYc0CRxkqAZhSvwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:05:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:05:41.302827 2026] [security2:error] [pid 8141:tid 8141] [client 45.3.53.241:22011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seishin-kan.org"] [uri "/.env.staging"] [unique_id "aZGoheHLakbJ4jsFfbXQ8wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:27:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:27:35.719889 2026] [security2:error] [pid 13209:tid 13209] [client 45.3.53.241:26609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scothorn.net"] [uri "/backend/.env"] [unique_id "aZFnV_UfBO3lwTwkdg29PAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:02:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:02:36.247343 2026] [security2:error] [pid 14304:tid 14304] [client 45.3.53.241:23579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ondakompun.com"] [uri "/.env.local"] [unique_id "aZFhfGQy1o8DM9PQ_bClPgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:18:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.53.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:18:25.865636 2026] [security2:error] [pid 26973:tid 26973] [client 45.3.53.241:53523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "officechristmascards.com"] [uri "/.env.production"] [unique_id "aZFXIeqch1eRKyCa_vF-VgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack