🇨🇿
lp
2026-09-10 07:52:08
(1 hour ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 45.66.208.165
2026-09-10T08:58:50+02: ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 45.66.208.165
2026-09-10T08:58:50+02:00 vpn Access-Reject 'crystal' station: 45.66.208.165 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-10T09:00:09+02:00 vpn Access-Reject 'shunen' station: 45.66.208.165 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-08 17:17:58
(1 day ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
ambor
2026-05-30 09:00:15
(3 months ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
2026-05-27 01:19:34
(3 months ago)
SQL injection, multiple attempts.
SQL Injection
🇺🇸
TPI-Abuse
2026-05-26 08:41:58
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.208.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.208.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 04:41:54.239062 2026] [security2:error] [pid 27635:tid 27635] [client 45.66.208.165:40737] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||agenesis7.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "agenesis7.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahVc0mvKCIjfKnnqPGid2QAAACY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 14:47:45
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.208.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.208.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 10:47:40.236615 2026] [security2:error] [pid 31099:tid 31099] [client 45.66.208.165:38503] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paulburns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paulburns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag8bDO3JzZpCkPXzl3sSGgAAABw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-18 22:00:20
(3 months ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
nationaleventpros.com
2026-05-14 20:20:24
(3 months ago)
WordPress login attempt
Brute-Force
🇪🇸
Cognisant-Security
2026-03-16 12:36:00
(5 months ago)
Attempts to login WordPress using invalid User Credentials
Web App Attack
Hacking
🇫🇷
SpaceHost-Server
2026-03-10 03:29:35
(6 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2026-03-09 20:11:58
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2026-01-22 19:45:39
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.208.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.208.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 14:45:32.386162 2026] [security2:error] [pid 8059:tid 8059] [client 45.66.208.165:45481] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||madisonjazzorchestra.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "madisonjazzorchestra.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXJ-XGEGb1gltwAEv8-wIAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2025-09-25 14:35:24
(11 months ago)
Wordpress hacking attempt
Web App Attack
🇺🇸
TPI-Abuse
2025-09-24 03:29:06
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.208.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.208.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 23:28:57.592725 2025] [security2:error] [pid 925:tid 925] [client 45.66.208.165:30151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bernsteinip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aNNleXKRJ6lgJs87TGDFWAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-24 00:10:25
(11 months ago)
Trawling for Open Source CMS installs
Hacking
Brute-Force
