🇺🇸
drewf.ink
2026-09-29 00:59:11
(1 day ago)
[00:59] Attempted HTTPS access to the GlobalProtect prelogin endpoint (VPN gateway fingerprinting/re ...
show more
[00:59] Attempted HTTPS access to the GlobalProtect prelogin endpoint (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇫🇷
pm33
2026-06-21 22:26:05
(3 months ago)
Wordpress login attempts
Brute-Force
🇩🇪
F242
2026-06-21 07:45:14
(3 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇲🇽
octageeks.com
2026-06-21 04:17:08
(3 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇬🇷
setupgr
2026-06-19 10:01:56
(3 months ago)
(mod_security) mod_security (id:900001) triggered by 45.3.53.98 (BR/Brazil/São Paulo/São Paulo/-/[ ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.53.98 (BR/Brazil/São Paulo/São Paulo/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 13:01:54.496653 2026] [security2:error] [pid 2276:tid 2437] [client 45.3.53.98:23367] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: cpanagiotou.gr"] [severity "CRITICAL"] [tag "security"] [hostname "cpanagiotou.gr"] [uri "/wp-login.php"] [unique_id "ajUTkvFOzdhEIc8u07d6jwAAABM"], referer: https://cpanagiotou.gr/wp-login.php
show less
Port Scan
🇫🇷
ELYAZ
2026-06-18 10:03:17
(3 months ago)
(y4) Failed scan -byebye- from 45.3.53.98 (BR/Brazil/-): (CF_ENABLE)
Hacking
🇬🇧
spamverify.com
2026-06-16 08:41:19
(3 months ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-06-15 22:12:52
(3 months ago)
(y4) Failed scan -byebye- from 45.3.53.98 (BR/Brazil/-): (CF_ENABLE)
Hacking
2025-11-07 19:50:38
(10 months ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-01 12:53:26
(10 months ago)
(mod_security) mod_security (id:210831) triggered by 45.3.53.98 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210831) triggered by 45.3.53.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 08:53:22.891056 2025] [security2:error] [pid 28742:tid 28742] [client 45.3.53.98:51967] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||hotpay.co|F|4"] [data "compatible ; MSIE"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "hotpay.co"] [uri "/xmlrpc.php"] [unique_id "aQYCwjyFYjzMyJA21WRKTAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
applemooz
2025-11-01 11:45:34
(10 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
2025-10-30 15:19:34
(10 months ago)
WordPress Brute Force
Brute-Force
🇳🇱
EGP Abuse Dept
2025-10-19 04:31:02
(11 months ago)
Unauthorized connection to SSH port 22
Port Scan
Hacking
SSH
🇮🇩
RasyiidWho
2025-04-08 02:15:30
(1 year ago)
ip112.20 . 45.3.53.98 - - [08/Apr/2025:09:15:29 +0700] "POST /wp-login.php HTTP/1.1" 404 548 "https: ...
show more
ip112.20 . 45.3.53.98 - - [08/Apr/2025:09:15:29 +0700] "POST /wp-login.php HTTP/1.1" 404 548 "https://routelink.net.id/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-03-12 18:10:38
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.53.98 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.53.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 12 14:10:35.318565 2025] [security2:error] [pid 999:tid 999] [client 45.3.53.98:51925] [client 45.3.53.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||1rod.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "1rod.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z9HOG-RwJcZ2JAnaoOt8twAAAAc"], referer: https://1rod.com
show less
Brute-Force
Bad Web Bot
Web App Attack
