45.153.34.230
listedBruteRegular
Case file
First seen on 2026-09-19T23:53:59Z, most recently active on 2026-10-03T19:39:36Z.
Recorded 18 attack-shaped requests across 6 separate days.
Its traffic read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability; it also matched a catalogue rule.
Seen from 2 of our sensors: edge, nl4-web.
Scored into the "Brute" level, carrying the badge Regular.
Routed via AS197170 (TechTies Inc.), an ASN we classify as hosting.
Publicly listed on this board, but not currently blocked on any of our hosts.
Enrichment
| rDNS | none |
|---|---|
| ASN | AS197170 — TechTies Inc. |
| ASN type | hosting |
| Country | The Netherlands (NL) |
| Flags | none observed |
Timeline
- 2026-09-191
- 2026-09-231
- 2026-09-298
- 2026-09-304
- 2026-10-012
- 2026-10-032
Evidence (newest first, up to 50)
| Time (UTC) | Vantage | Site | Class | Status | Evidence |
|---|---|---|---|---|---|
| 2026-10-03T19:39:36Z | nl4-web | stefanpetkov.day | matched a catalogue rule | 404 | 45.153.34.230 - - [03/Oct/2026:22:39:36 +0300] "GET /wp-content/plugins/sigmaforms-pro/CHANGELOG.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-10-03T19:39:36Z | nl4-web | stefanpetkov.day | matched a catalogue rule | 404 | 45.153.34.230 - - [03/Oct/2026:22:39:36 +0300] "GET /wp-content/plugins/sigmaforms-pro/changelog.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-10-03T19:39:36Z – 2026-10-03T19:39:36Z ×2 | nl4-web | stefanpetkov.day | 2 × read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability | 404 | 45.153.34.230 - - [03/Oct/2026:22:39:36 +0300] "GET /wp-content/plugins/sigmaforms-pro/README.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" (2 distinct paths) |
| 2026-09-23T08:18:58Z | edge | victorantonov.com | matched a catalogue rule | {"ts":"2026-09-23T08:18:58Z","ip":"45.153.34.230","zone":"victorantonov.com","host":"victorantonov.com","path":"/","method":"POST","query":"<truncated>","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","action":"block","source":"f… | |
| 2026-09-19T23:53:59Z | edge | victorantonov.com | matched a catalogue rule | {"ts":"2026-09-19T23:53:59Z","ip":"45.153.34.230","zone":"victorantonov.com","host":"victorantonov.com","path":"/","method":"POST","query":"<truncated>","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","action":"block","source":"f… | |
| 2026-09-30T15:24:35Z | nl4-web | zmey.eu | matched a catalogue rule | 404 | 45.153.34.230 - - [30/Sep/2026:18:24:35 +0300] "GET /wp-content/plugins/devkit/CHANGELOG.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-30T15:24:35Z | nl4-web | zmey.eu | matched a catalogue rule | 404 | 45.153.34.230 - - [30/Sep/2026:18:24:35 +0300] "GET /wp-content/plugins/devkit/changelog.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-30T15:24:35Z – 2026-09-30T15:24:35Z ×2 | nl4-web | zmey.eu | 2 × read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability | 404 | 45.153.34.230 - - [30/Sep/2026:18:24:35 +0300] "GET /wp-content/plugins/devkit/README.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" (2 distinct paths) |
| 2026-09-30T13:59:05Z | nl4-web | zmey.eu | matched a catalogue rule | 404 | 45.153.34.230 - - [30/Sep/2026:16:59:05 +0300] "GET /wp-content/plugins/tutor/CHANGELOG.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-30T13:59:05Z | nl4-web | zmey.eu | matched a catalogue rule | 404 | 45.153.34.230 - - [30/Sep/2026:16:59:05 +0300] "GET /wp-content/plugins/tutor/changelog.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-30T13:59:05Z – 2026-09-30T13:59:05Z ×2 | nl4-web | zmey.eu | 2 × read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability | 404 | 45.153.34.230 - - [30/Sep/2026:16:59:05 +0300] "GET /wp-content/plugins/tutor/README.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" (2 distinct paths) |
| 2026-10-01T05:11:32Z | nl4-web | victorantonov.com | matched a catalogue rule | 404 | 45.153.34.230 - - [01/Oct/2026:08:11:32 +0300] "GET /wp-content/plugins/devkit/CHANGELOG.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-10-01T05:11:32Z | nl4-web | victorantonov.com | matched a catalogue rule | 404 | 45.153.34.230 - - [01/Oct/2026:08:11:32 +0300] "GET /wp-content/plugins/devkit/changelog.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-10-01T05:11:31Z – 2026-10-01T05:11:32Z ×2 | nl4-web | victorantonov.com | 2 × read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability | 404 | 45.153.34.230 - - [01/Oct/2026:08:11:32 +0300] "GET /wp-content/plugins/devkit/README.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" (2 distinct paths) |
| 2026-09-29T21:23:56Z | nl4-web | techwriters.eu | matched a catalogue rule | 404 | 45.153.34.230 - - [30/Sep/2026:00:23:56 +0300] "GET /wp-content/plugins/sigmaforms-pro/CHANGELOG.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-29T21:23:56Z | nl4-web | techwriters.eu | matched a catalogue rule | 404 | 45.153.34.230 - - [30/Sep/2026:00:23:56 +0300] "GET /wp-content/plugins/sigmaforms-pro/changelog.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-29T21:23:56Z – 2026-09-29T21:23:56Z ×2 | nl4-web | techwriters.eu | 2 × read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability | 404 | 45.153.34.230 - - [30/Sep/2026:00:23:56 +0300] "GET /wp-content/plugins/sigmaforms-pro/README.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" (2 distinct paths) |
| 2026-09-29T18:21:52Z | nl4-web | servbg.com | matched a catalogue rule | 404 | 45.153.34.230 - - [29/Sep/2026:21:21:52 +0300] "GET /wp-content/plugins/devkit/CHANGELOG.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-29T18:21:52Z | nl4-web | servbg.com | matched a catalogue rule | 404 | 45.153.34.230 - - [29/Sep/2026:21:21:52 +0300] "GET /wp-content/plugins/devkit/changelog.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-29T18:21:52Z – 2026-09-29T18:21:52Z ×2 | nl4-web | servbg.com | 2 × read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability | 404 | 45.153.34.230 - - [29/Sep/2026:21:21:52 +0300] "GET /wp-content/plugins/devkit/README.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" (2 distinct paths) |
| 2026-09-29T16:39:45Z | nl4-web | servbg.com | matched a catalogue rule | 404 | 45.153.34.230 - - [29/Sep/2026:19:39:45 +0300] "GET /wp-content/plugins/tutor/CHANGELOG.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-29T16:39:45Z | nl4-web | servbg.com | matched a catalogue rule | 404 | 45.153.34.230 - - [29/Sep/2026:19:39:45 +0300] "GET /wp-content/plugins/tutor/changelog.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-29T16:39:45Z – 2026-09-29T16:39:45Z ×2 | nl4-web | servbg.com | 2 × read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability | 404 | 45.153.34.230 - - [29/Sep/2026:19:39:45 +0300] "GET /wp-content/plugins/tutor/README.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" (2 distinct paths) |
| 2026-09-29T16:39:17Z | nl4-web | servbg.com | matched a catalogue rule | 404 | 45.153.34.230 - - [29/Sep/2026:19:39:17 +0300] "GET /wp-content/plugins/seo-by-rank-math/CHANGELOG.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-29T16:39:17Z | nl4-web | servbg.com | matched a catalogue rule | 404 | 45.153.34.230 - - [29/Sep/2026:19:39:17 +0300] "GET /wp-content/plugins/seo-by-rank-math/changelog.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" |
| 2026-09-29T16:39:17Z – 2026-09-29T16:39:17Z ×2 | nl4-web | servbg.com | 2 × read a WordPress plugin's readme.txt to fingerprint its exact version for a known vulnerability | 404 | 45.153.34.230 - - [29/Sep/2026:19:39:17 +0300] "GET /wp-content/plugins/seo-by-rank-math/README.txt HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0 Safari/537.36" (2 distinct paths) |
Report history
No abuse report sent for this address yet.
Not currently correlated with any campaign.
Dispute or removal: [email protected] — reference 45.153.34.230 (mailbox goes live with phase 3). See /threats/about for the method and the 7-day review window.
card.svg (used as this page's og:image)
