🇺🇦
URAN Publishing Service
2026-08-05 12:02:01
(1 week ago)
[05/Aug/2026:15:02:01 +0300] -- 45.157.112.245 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp- ...
show more
[05/Aug/2026:15:02:01 +0300] -- 45.157.112.245 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-login.php HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇬🇧
abivia
2026-08-03 00:40:34
(2 weeks ago)
Abivia WAF trigger: Rule not-wp: WP probing on non-WP site uri: /wp-admin/
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-02 20:39:23
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.157.112.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.157.112.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 16:39:17.806842 2026] [security2:error] [pid 3460467:tid 3460467] [client 45.157.112.245:37979] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cms2020.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cms2020.com"] [uri "/wp-json/wp/v2/users"] [unique_id "am-q9Q0hvpr4q_cvCBok5gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-02 00:10:33
(2 weeks ago)
"GET /wp-login.php HTTP/1.1"
Hacking
Web App Attack
🇺🇸
ph
2026-07-31 13:56:52
(2 weeks ago)
Bad web bot attempting to run wp-login.php on non-WP site
Hacking
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-06 00:02:54
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇵🇱
wHosts
2026-06-30 10:06:45
(1 month ago)
Blocked by Fail2Ban
Web App Attack
🇨🇭
backslash
2026-06-28 19:57:01
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-28 17:38:08
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.157.112.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.157.112.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 13:38:05.785399 2026] [security2:error] [pid 5224:tid 5224] [client 45.157.112.245:36677] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cathybermanmft.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cathybermanmft.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akFb_dc-cXPEvilcg6CaEQAAAAY"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-18 06:15:12
(2 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
US/United States/-
Web App Attack
🇫🇷
Sklurk
2026-06-18 02:03:57
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
factor1
2026-06-15 11:46:14
(2 months ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
🇳🇱
ParaBug
2026-06-15 04:08:39
(2 months ago)
45.157.112.245 - - [15/Jun/2026:06:08:39 +0200] "POST /include/file.php HTTP/1.1" 301 4191 "-" "Mozi ...
show more
45.157.112.245 - - [15/Jun/2026:06:08:39 +0200] "POST /include/file.php HTTP/1.1" 301 4191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Mobile/15E148 Safari/604.1"
...
show less
Phishing
Brute-Force
Web App Attack
2026-06-13 08:34:46
(2 months ago)
45.157.112.245 - - [13/Jun/2026:10:34:46 +0200] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
45.157.112.245 - - [13/Jun/2026:10:34:46 +0200] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
45.157.112.245 - - [13/Jun/2026:10:34:46 +0200] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
45.157.112.245 - - [13/Jun/2026:10:34:46 +0200] "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
45.157.112.245 - - [13/Jun/2026:10:34:46 +0200] "GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
45.157.112.245 - - [13/Jun/2026:10:34:46 +0200] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1"
...
show less
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-06-13 00:32:50
(2 months ago)
897 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot