๐ฉ๐ช
raph
2026-08-04 23:10:14
(3 weeks ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
๐ฉ๐ช
raph
2026-07-30 12:25:15
(4 weeks ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
๐ฑ๐ป
garmtech.com
2026-07-30 01:08:23
(4 weeks ago)
IM360 WAF: Prohibited WordPress username login/registration
Web App Attack
๐ซ๐ท
Kenshin869
2026-07-30 01:05:36
(4 weeks ago)
Wordpress unauthorized access attempt
Brute-Force
๐ฎ๐ฉ
Burayot
2026-07-28 13:24:18
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.157.112.45 (FR/France/-): 2 in t ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.157.112.45 (FR/France/-): 2 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-28 13:23:51
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.157.112.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.157.112.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 09:23:47.271540 2026] [security2:error] [pid 2209964:tid 2209964] [client 45.157.112.45:57719] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fgrotary.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fgrotary.org"] [uri "/wp-json/wp/v2/users"] [unique_id "amitY08m_f4E0tIGj8PQnAAAABo"], referer: https://t.co/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-07-12 15:09:49
(1 month ago)
520 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020 ...
show more
520 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.0.0) Gecko/20020623 Debian/1.0.0-0.woody.1
489 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC; en-US; rv:0.9.3) Gecko/20010802
482 requests with user_agent.original Dalvik/2.1.0 (Linux; U; Android 11; Tibuta_MasterPad-E100 Build/RP1A.201005.006)
470 requests with user_agent.original AppleCoreMedia/1.0.0.23A344 (Macintosh; U; Intel Mac OS X 14_0; da_dk)
468 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.28.7586
467 requests with user_agent.original Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.6) Gecko/20050319
458 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021208 Debian/1.2.1-2
454 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 I
show less
Brute-Force
Bad Web Bot
๐ซ๐ท
dynamix
2026-07-03 21:59:12
(1 month ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
๐ฌ๐ง
blik2108
2026-06-29 00:06:07
(1 month ago)
www.blacknell.co.uk:443 45.157.112.45 - - [29/Jun/2026:01:05:43 +0100] "GET /wp-login.php HTTP/1.1" ...
show more
www.blacknell.co.uk:443 45.157.112.45 - - [29/Jun/2026:01:05:43 +0100] "GET /wp-login.php HTTP/1.1" 200 6127 "" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
www.blacknell.co.uk:443 45.157.112.45 - - [29/Jun/2026:01:06:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2890 "https://www.blacknell.co.uk/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
www.blacknell.co.uk:443 45.157.112.45 - - [29/Jun/2026:01:06:03 +0100] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.blacknell.co.uk%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 4856 "https://www.blacknell.co.uk/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
www.blacknell.co.uk:443 45.157.112.45 - - [29/Jun/2026:01:06:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2890 "https://www.blacknell.co.uk/wp-login.php" "Mozilla/5
...
show less
Brute-Force
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-06-26 02:04:35
(2 months ago)
45.157.112.45 - - [26/Jun/2026:05:04:29 +0300] "GET /wp-login.php HTTP/1.1" 404 4742 "-" "Mozilla/5. ...
show more
45.157.112.45 - - [26/Jun/2026:05:04:29 +0300] "GET /wp-login.php HTTP/1.1" 404 4742 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0"
45.157.112.45 - - [26/Jun/2026:05:04:34 +0300] "GET /wp-admin/ HTTP/1.1" 404 705 "https://www.bing.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0"
...
show less
Web App Attack
Anonymous
2026-06-23 19:29:18
(2 months ago)
Blocked by ModSec and CSF
Port Scan
๐ซ๐ฎ
YF
2026-06-15 20:01:04
(2 months ago)
Attaque distribuรฉe subnet
DDoS Attack
Web App Attack
Anonymous
2026-06-14 11:40:10
(2 months ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐บ๐ธ
nyt
2026-06-14 03:30:30
(2 months ago)
Brute-Force, Web App Attack, 503 on login page
Brute-Force
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-06-13 22:11:30
(2 months ago)
45.157.112.45 - [14/Jun/2026:01:10:47 +0300] "POST /wp-login.php HTTP/1.1" 403 2998 "https://BIATHLO ...
show more
45.157.112.45 - [14/Jun/2026:01:10:47 +0300] "POST /wp-login.php HTTP/1.1" 403 2998 "https://BIATHLONTARGETS.COM/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0" "3.06"
45.157.112.45 - [14/Jun/2026:01:10:57 +0300] "POST /wp-login.php HTTP/1.1" 404 9574 "https://BIATHLONTARGETS.COM/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1" "4.64"
45.157.112.45 - [14/Jun/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://BIATHLONTARGETS.COM/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.1" "2.37"
45.157.112.45 - [14/Jun/2026:01:11:18 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://BIATHLONTARGETS.COM/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/121.0" "2.37"
45.157.112.45 - [14/Jun/2026:01:11:30 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://BIATHLONTARGETS.COM/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/122.0" "
...
show less
Hacking
Brute-Force
Web App Attack