๐บ๐ธ
TPI-Abuse
2026-08-31 15:46:37
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 45.8.205.255 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.8.205.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:46:31.537426 2026] [security2:error] [pid 24234:tid 24234] [client 45.8.205.255:58420] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||meganmurph.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "meganmurph.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apWh19QxKw0KES24Twhw6AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
3202931de
2026-08-31 12:05:53
(4 hours ago)
Scans for potential vulnerabilities
Web App Attack
๐บ๐ธ
ph
2026-08-31 12:05:27
(4 hours ago)
Bad web bot attempting to run wp-login.php on non-WP site
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-08-31 11:15:27
(5 hours ago)
[redacted] 45.8.205.255 - - [31/Aug/2026:12:15:25 +0100] "GET /[redacted] HTTP/1.1" 302 6753 0/77226 ...
show more
[redacted] 45.8.205.255 - - [31/Aug/2026:12:15:25 +0100] "GET /[redacted] HTTP/1.1" 302 6753 0/77226 "http://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" [redacted] 45.8.205.255 - - [31/Aug/2026:12:15:25 +0100] "GET / HTTP/1.1" 200 14749 0/135679 "https://[redacted]/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
jcbriar
2026-08-31 11:15:25
(5 hours ago)
Searching for vulnerable scripts
Hacking
Web App Attack
๐ณ๐ฑ
tmiland
2026-08-31 10:53:44
(6 hours ago)
(wordpress_login) WordPress Login Attack 45.8.205.255 (FR/France/-): 3 in the last 3600 secs; IP: 45 ...
show more
(wordpress_login) WordPress Login Attack 45.8.205.255 (FR/France/-): 3 in the last 3600 secs; IP: 45.8.205.255; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.8.205.255 - - [31/Aug/2026:12:53:42 +0200] "GET /wp-login.php HTTP/1.1" 302 138 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" 45.8.205.255 - - [31/Aug/2026:12:53:42 +0200] "GET /wp-login.php HTTP/1.1" 200 2251 "http://*.*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" 45.8.205.255 - - [31/Aug/2026:12:53:43 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" 200 314 "http://*.*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
show less
Brute-Force
๐ฉ๐ช
neckaralb-admin.de
2026-08-31 10:44:23
(6 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 10:41:09
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 45.8.205.255 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.8.205.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:41:00.567257 2026] [security2:error] [pid 11523:tid 11523] [client 45.8.205.255:34654] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tckgbookkeeping.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tckgbookkeeping.biz"] [uri "/wp-json/wp/v2/users"] [unique_id "apVaPCYmSNhgL-AcQ92cuQAAAAQ"], referer: http://arogun.org/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-08-31 10:20:04
(6 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-08-31 09:53:17
(7 hours ago)
45.8.205.255 - - [31/Aug/2026:06:58:18 +0200] "GET /wp-login.php HTTP/1.1" 301 578 "" "Mozilla/5.0 ( ...
show more
45.8.205.255 - - [31/Aug/2026:06:58:18 +0200] "GET /wp-login.php HTTP/1.1" 301 578 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
45.8.205.255 - - [31/Aug/2026:06:58:18 +0200] "GET /wp-login.php HTTP/2.0" 404 341 "http://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
45.8.205.255 - - [31/Aug/2026:11:53:14 +0200] "GET /wp-login.php HTTP/1.1" 301 587 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
45.8.205.255 - - [31/Aug/2026:11:53:14 +0200] "GET /wp-login.php HTTP/2.0" 404 341 "http://[site]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
45.8.205.255 - - [31/Aug/2026:09:17:31 +0200] "GET /wp-login.php HTTP/1.1" 301 596 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
45.8.205.255 - - [31/Aug/2026:09:17:31 +0200] "GET /wp-login.php HTTP/2.0" 404 332 "http://[site]/wp-lo
show less
Web App Attack
Hacking
๐ธ๐ช
SkyDancer
2026-08-31 09:43:25
(7 hours ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
๐บ๐ธ
etu brutus
2026-08-31 09:08:57
(7 hours ago)
45.8.205.255 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
๐จ๐ญ
zynex
2026-08-31 08:11:41
(8 hours ago)
URL Probing: /wp-login.php
Web App Attack
๐ฌ๐ง
seniorlinuxadmin
2026-08-31 07:39:42
(9 hours ago)
45.8.205.255 - - [30/Aug/2026:19:21:49 +0100] "GET /wp-login.php HTTP/2.0" 404 158 "-" "Mozilla/5.0 ...
show more
45.8.205.255 - - [30/Aug/2026:19:21:49 +0100] "GET /wp-login.php HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0"
show less
Port Scan
Web App Attack
Anonymous
2026-08-31 07:31:04
(9 hours ago)
Web App Attack, Hacking
Hacking
Web App Attack