🇺🇸
lostswordfish.com
2026-07-06 21:24:02
(1 hour ago)
Wordfence waf block on taussigtravel
Web App Attack
🇲🇽
octageeks.com
2026-07-06 04:21:47
(18 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇲🇽
octageeks.com
2026-07-01 04:20:30
(5 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-06-28 07:31:26
(1 week ago)
[server.tmg.gr] httpd-login-spray-site: sites=irad2022.gr; logs=/var/log/httpd/domains/irad2022.gr.l ...
show more
[server.tmg.gr] httpd-login-spray-site: sites=irad2022.gr; logs=/var/log/httpd/domains/irad2022.gr.log; samples=site_wide=true | distinct_ips=20 | /wp-login.php
show less
Hacking
Web App Attack
🇨🇭
backslash
2026-01-04 06:40:09
(6 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇮🇹
VHosting
2026-01-03 17:00:04
(6 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇨🇳
ThreatBook.io
2025-12-23 00:39:58
(6 months ago)
ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/45.3.55.146
2025- ...
show more
ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/45.3.55.146
2025-12-22 21:45:50 /+webvpn+/index.html,{"body":"group_list=\u0026password=jkotzman\u0026username=jkotzman","content_type":"application/x-www-form-urlencoded","header":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8"],"Accept-Encoding":["deflate, gzip"],"Accept-Language":["en-US,en;q=0.9"],"Cache-Control":["max-age=0"],"Connection":["keep-alive"],"Content-Length":["47"],"Content-Type":["application/x-www-form-urlencoded"],"Cookie":["webvpnlogin=1; webvpnLang=en"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64)"]},"host":"161.189.135.131","method":"POST","proto":"HTTP/1.1","remote_addr":"45.3.55.146:40623","status_code":200,"url":"/+webvpn+/index.html","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64)"}
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 14:21:34
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 09:21:28.607329 2025] [security2:error] [pid 32628:tid 32628] [client 45.3.55.146:27989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jimgrenier.com"] [uri "/.svn/wc.db"] [unique_id "aSheaKOYNeCDeSHfEyOFOQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:46:21
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:46:17.798831 2025] [security2:error] [pid 1872:tid 1872] [client 45.3.55.146:49289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.odysseydogasporlari.com"] [uri "/.git/HEAD"] [unique_id "aSVQuYsljO9OYWEw-V6WAgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:51:10
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:51:07.331942 2025] [security2:error] [pid 10909:tid 10909] [client 45.3.55.146:18547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sokolskiy.com"] [uri "/.git/HEAD"] [unique_id "aSVDy192wWtvaF3I129v1gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:19:11
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:19:04.127884 2025] [security2:error] [pid 28826:tid 28879] [client 45.3.55.146:9299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idwic.spiritualchristian.com"] [uri "/.svn/wc.db"] [unique_id "aSUuOMWWe4FWNi79sDU_FgAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:45:46
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:45:41.520454 2025] [security2:error] [pid 31458:tid 31458] [client 45.3.55.146:22157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.largeprintjournal.com"] [uri "/.svn/wc.db"] [unique_id "aSUmZcs2wOZ82KPt3Hd0-AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-25 03:04:00
(7 months ago)
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:42:00
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:41:56.735168 2025] [security2:error] [pid 14584:tid 14584] [client 45.3.55.146:10687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.allcostaricarentals.com"] [uri "/.svn/wc.db"] [unique_id "aSUXdNj-yWmSalcwQbK0ewAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:09:51
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:09:42.756514 2025] [security2:error] [pid 28226:tid 28226] [client 45.3.55.146:53301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.stoneageartifacts.com"] [uri "/.git/HEAD"] [unique_id "aSUP5iygQQkys_ooNEwHtgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack