HTTP application-layer DoS / botnet traffic from 46.8.22.80: repeated high-cost dynamic page and fee ...
show moreHTTP application-layer DoS / botnet traffic from 46.8.22.80: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 46.8.22.80: traffic from this addre ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 46.8.22.80: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
Anonymous
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-46.46.8.22.80.web-spammers. ...
show moreIM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-46.46.8.22.80.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
Anonymous
Scanning for vulnerabilities (wp-login.php, etc)
Hacking
Web App Attack
Anonymous
PARMACOM WEBEXPLOIT 46.8.22.80 (46.8.22.80)
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1
(mod_security) mod_security (id:6) triggered by 46.8.22.80 (RU/Russia/-): 1 in the last 3600 secs; P ...
show more(mod_security) mod_security (id:6) triggered by 46.8.22.80 (RU/Russia/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 18:30:34.663196 2025] [security2:error] [pid 7083:tid 7120] [client 46.8.22.80:34149] [client 46.8.22.80] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "Z_zx2qi6bXXRXoiJg5M9ygAAAUk"], referer: https://kb.pavietnam.vn/wp-login.php?action=register
show less