2026-07-25 22:36:33
(6 hours ago)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-07 08:24:00
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 04:23:54.739109 2026] [security2:error] [pid 23282:tid 23282] [client 183.207.45.126:26541] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gulftelecom.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gulftelecom.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aky3miSjSPj3Xj5hrvTxnwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-24 19:56:11
(1 month ago)
Try to access /xmlrpc.php?rsd
Web App Attack
2026-06-19 21:51:48
(1 month ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-05 21:47:08
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:47:03.213437 2026] [security2:error] [pid 820:tid 820] [client 183.207.45.126:11795] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||silkenswift.borzois.com|F|2"] [data ".borzois.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "silkenswift.borzois.com"] [uri "/www.borzois.com"] [unique_id "aiND13J1UMMC0cTvSghYRQAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-03 00:00:13
(1 month ago)
| [Dangerous/China] Aggressive IP 183.207.45.126 (~30 hits). Type: DoS Defender- Web server 400 erro ...
show more
| [Dangerous/China] Aggressive IP 183.207.45.126 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇩🇪
big-cloud.nl
2026-05-26 10:24:22
(1 month ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 02:03:40
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 22:03:32.503652 2026] [security2:error] [pid 13558:tid 13560] [client 183.207.45.126:48241] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.charteredwealthmanager.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.charteredwealthmanager.com"] [uri "/http/charteredfinancialmanager.com"] [unique_id "agUtdCC-d4YGl8sDazPQPgAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 07:49:31
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 03:49:25.492863 2026] [security2:error] [pid 10751:tid 10751] [client 183.207.45.126:45195] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gapanda.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gapanda.com"] [uri "/php-old.ini"] [unique_id "afxEBVBmNzvuKJAVLM23jgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-04-17 19:09:04
(3 months ago)
2026-04-17 09:09:01+02:00 portcheck: Unsolicited connect from 183.207.45.126:32226 (seen tarpitted)
...
show more
2026-04-17 09:09:01+02:00 portcheck: Unsolicited connect from 183.207.45.126:32226 (seen tarpitted)
2026-04-17 21:09:01+02:00 portcheck: Unsolicited connect from 183.207.45.126:32233 (seen tarpitted)
show less
Port Scan
🇺🇸
myagent.site
2026-04-13 12:45:53
(3 months ago)
Blocking for trying to access an exploit file: /myagent.site
Hacking
🇺🇸
myagent.site
2026-04-02 11:13:43
(3 months ago)
Blocking for trying to access an exploit file: /myagent.site
Hacking
🇺🇸
TPI-Abuse
2026-03-27 09:27:41
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 183.207.45.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 05:27:36.875728 2026] [security2:error] [pid 10591:tid 10591] [client 183.207.45.126:34763] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.scoutinsignia.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/WS_FTP.LOG"] [unique_id "acZNiEm86uDAo9JLhxMBtwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-03-24 13:44:40
(4 months ago)
Blocking for trying to access an exploit file: /myagent.site
Hacking
🇺🇸
myagent.site
2026-03-22 11:47:00
(4 months ago)
Blocking for trying to access an exploit file: /myagent.site
Hacking