🇫🇷
tilellit.pro
2026-07-05 04:25:27
(1 day ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇩🇪
4server
2026-07-03 17:24:52
(2 days ago)
[FriJul0319:24:48.5765722026][security2:error][pid434453:tid434546][client45.66.209.12:0]ModSecurity ...
show more
[FriJul0319:24:48.5765722026][security2:error][pid434453:tid434546][client45.66.209.12:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"akfwYOLXXm4DAaUUcaJjPgAAAJA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
tilellit.pro
2026-06-29 12:27:18
(6 days ago)
Fail2Ban banned 45.66.209.12 for security violations in jail wp-armour. Log: 2026/06/29 12:27:18 [er ...
show more
Fail2Ban banned 45.66.209.12 for security violations in jail wp-armour. Log: 2026/06/29 12:27:18 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.66.209.12 | Target: wplogin" , client: 45.66.209.12, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-06-27 19:57:28
(1 week ago)
Fail2Ban banned 45.66.209.12 for security violations in jail wp-armour. Log: 2026/06/27 19:57:27 [er ...
show more
Fail2Ban banned 45.66.209.12 for security violations in jail wp-armour. Log: 2026/06/27 19:57:27 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.66.209.12 | Target: wplogin" , client: 45.66.209.12, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-06-27 06:22:54
(1 week ago)
Fail2Ban banned 45.66.209.12 for security violations in jail wp-armour. Log: 2026/06/27 06:22:53 [er ...
show more
Fail2Ban banned 45.66.209.12 for security violations in jail wp-armour. Log: 2026/06/27 06:22:53 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.66.209.12 | Target: wplogin" , client: 45.66.209.12, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
mind5t0rm
2026-02-08 18:26:40
(4 months ago)
(WPLOGIN) WP Login Attack 45.66.209.12 (RU/Russia/-): 3 in the last 3600 secs; Ports: *; Direction: ...
show more
(WPLOGIN) WP Login Attack 45.66.209.12 (RU/Russia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.66.209.12 - - [09/Feb/2026:01:26:32 +0700] "GET /wp-login.php HTTP/2.0" 200 2454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
45.66.209.12 - - [09/Feb/2026:01:26:36 +0700] "GET /wp-login.php?wp_lang=en_US HTTP/2.0" 200 2454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
45.66.209.12 - - [09/Feb/2026:01:26:39 +0700] "POST /wp-login.php?wp_lang=en_US HTTP/2.0" 302 0 "https://zerowaterthailand.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
show less
Port Scan
2025-09-06 03:58:43
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-03-13 01:11:41
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
oncord
2025-03-12 06:26:10
(1 year ago)
Form spam
Web Spam
2025-03-04 05:14:50
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-03-03 21:19:35
(1 year ago)
wordpress-trap
Web App Attack
2024-05-20 01:58:57
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
ghostwarriors
2024-05-15 12:20:02
(2 years ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2024-03-13 06:54:02
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-02-09 06:07:10
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 45.66.209.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.66.209.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 09 01:07:04.094887 2024] [security2:error] [pid 16130] [client 45.66.209.12:35859] [client 45.66.209.12] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Danbury II/Stetson Bordeaux/originals/Thumbs.db"] [unique_id "ZcXBCFSl40_KAi4eiXgVywAAAA4"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Danbury%20II/Danbury%20II/Stetson%20Bordeaux/originals/
show less
Brute-Force
Bad Web Bot
Web App Attack