🇺🇸
TPI-Abuse
2026-06-07 10:26:32
(23 hours ago)
(mod_security) mod_security (id:218580) triggered by 104.245.241.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:218580) triggered by 104.245.241.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 06:26:26.445536 2026] [security2:error] [pid 22432:tid 22432] [client 104.245.241.145:44195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\*[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:owner_ineu. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.||www.register-yacht-delaware.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.register-yacht-delaware.com"] [uri "/delaware-yacht-registration.html"] [unique_id "aiVHUpZ0FwOjbvADRvz-iAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
RasyiidWho
2026-05-29 09:05:55
(1 week ago)
ip112.20 . 104.245.241.145 - - [29/May/2026:16:05:53 +0700] "GET /wp-login.php HTTP/1.1" 404 548 "-" ...
show more
ip112.20 . 104.245.241.145 - - [29/May/2026:16:05:53 +0700] "GET /wp-login.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Brute-Force
Port Scan
Bad Web Bot
Web App Attack
SSH
🇧🇪
voormedia
2026-02-27 06:00:49
(3 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇧🇪
voormedia
2026-02-21 08:30:44
(3 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
2026-02-20 07:37:02
(3 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
🇫🇷
tilellit.pro
2026-01-31 12:52:00
(4 months ago)
Fail2Ban banned 104.245.241.145 for security violations in jail wp-armour. Log: 2026/01/31 12:52:00 ...
show more
Fail2Ban banned 104.245.241.145 for security violations in jail wp-armour. Log: 2026/01/31 12:52:00 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.245.241.145 | Target: wplogin" , client: 104.245.241.145, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-01-27 21:18:09
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 104.245.241.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 104.245.241.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 16:18:05.224576 2026] [security2:error] [pid 28385:tid 28385] [client 104.245.241.145:29663] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||web.cruisingforsex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "web.cruisingforsex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXkrjcvuIbmubI0GqaTk1AAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-24 17:53:53
(4 months ago)
WP Login Scan Activities
Web App Attack
🇦🇺
MAGIC
2025-04-11 22:06:04
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇷
oonux.net
2025-04-06 17:25:47
(1 year ago)
RouterOS: Scanning detected TCP 104.245.241.145:59300 > x.x.x.x:443
Port Scan
🇦🇺
MAGIC
2025-04-05 14:04:10
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇸🇪
SkyDancer
2025-04-05 08:57:12
(1 year ago)
Multiple web intrusion attempts or RDP/SSH hacking using wrong credentials. Attack automatically blo ...
show more
Multiple web intrusion attempts or RDP/SSH hacking using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Ai-D
show less
Hacking
Brute-Force
SSH
🇨🇳
ThreatBook.io
2025-03-31 02:11:44
(1 year ago)
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/104.245.241.145
2025- ...
show more
ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/104.245.241.145
2025-03-30 18:13:51 /+CSCOE+/logon.html
show less
Web App Attack
🇨🇿
lp
2025-03-30 16:50:03
(1 year ago)
Unauthorized VPN login attempts: 17 attempts were recorded from 104.245.241.145
2025-03-30T18:43:47+ ...
show more
Unauthorized VPN login attempts: 17 attempts were recorded from 104.245.241.145
2025-03-30T18:43:47+02:00 vpn Access-Reject 'xstrj46' station: 104.245.241.145 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-30T18:43:55+02:00 vpn Access-Reject 'kleibl' station: 104.245.241.145 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-30T18:43:56+02:00 vpn Access-Reject 'kleibl' station: 104.245.241.145 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-30T18:43:57+02:00 vpn Access-Reject 'xsvon04' station: 104.245.241.145 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-30T18:44:03+02:00 vpn Access-Reject 'xzaro03' station: 104.245.241.145 auth-type: - realm: vse.cz
show less
Brute-Force
Web App Attack
🇷🇸
Smel
2025-03-30 12:07:01
(1 year ago)
HTTP/80/443/8080 Unauthorized Probe, Hack -
Hacking
Web App Attack