🇫🇷
tilellit.pro
2026-06-28 07:16:11
(5 days ago)
Fail2Ban banned 185.81.145.111 for security violations in jail wp-armour. Log: 2026/06/28 07:16:10 [ ...
show more
Fail2Ban banned 185.81.145.111 for security violations in jail wp-armour. Log: 2026/06/28 07:16:10 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.81.145.111 | Target: wplogin" , client: 185.81.145.111, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-06-25 18:14:48
(1 week ago)
Fail2Ban banned 185.81.145.111 for security violations in jail wp-armour. Log: 2026/06/25 18:14:47 [ ...
show more
Fail2Ban banned 185.81.145.111 for security violations in jail wp-armour. Log: 2026/06/25 18:14:47 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.81.145.111 | Target: wplogin" , client: 185.81.145.111, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇨🇿
ptlab
2026-06-25 10:51:29
(1 week ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇩🇪
paissangroup
2026-06-25 02:40:46
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 13:07:04
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.81.145.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.81.145.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 09:06:50.005021 2026] [security2:error] [pid 21852:tid 21852] [client 185.81.145.111:37425] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bacona.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bacona.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajqE6kr5nfI0oh3dB2KhzwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 21:59:03
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.81.145.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.81.145.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 17:58:49.559829 2026] [security2:error] [pid 25258:tid 25258] [client 185.81.145.111:30301] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||homebuilt.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "homebuilt.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajcNGase6OQWYP66jQhmzgAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 06:45:11
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 185.81.145.111 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.81.145.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 02:44:56.978422 2026] [security2:error] [pid 21240:tid 21240] [client 185.81.145.111:39487] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bennefeld.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bennefeld.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajY26HNWgxRhqhfYLYZINQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-05-07 08:09:58
(1 month ago)
http-bad-user-agent - IP: 185.81.145.111 - time="2026-05-07T10:09:58+02:00" level=info msg="(555f66 ...
show more
http-bad-user-agent - IP: 185.81.145.111 - time="2026-05-07T10:09:58+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 185.81.145.111 (RU/35830) : 4h ban on Ip 185.81.145.111" module=db
show less
Bad Web Bot
2025-11-24 20:18:18
(7 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇫🇷
masterguru
2025-11-22 23:06:18
(7 months ago)
(FolderList) Hacking file access attemp in wordpress site from 185.81.145.111 (US/United States/-): ...
show more
(FolderList) Hacking file access attemp in wordpress site from 185.81.145.111 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇵🇱
Might Man
2022-06-11 02:14:19
(4 years ago)
h
Hacking
Exploited Host
Web App Attack
🇮🇩
hermawan
2022-01-28 05:29:45
(4 years ago)
[Fri Jan 28 17:29:44.190432 2022] [:error] [pid 2175:tid 140575059724032] [client 185.81.145.111:325 ...
show more
[Fri Jan 28 17:29:44.190432 2022] [:error] [pid 2175:tid 140575059724032] [client 185.81.145.111:32579] [client 185.81.145.111] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/coreruleset-3.3.2/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1060"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4073-meteorologi/prakiraan-meteorologi/prakiraan-cuaca-harian-tiap-3-jam-sekali-per-kecamatan/1212-prakiraan-cuaca-lamongan"] [unique_id "YfPFmGjQRCTvt-TP1toSCwAAAVs"], referer: https://karangploso.jatim.bmkg.go.id/inde
...
show less
Hacking
Web App Attack
2021-05-28 15:45:00
(5 years ago)
Credential Stuffing
Brute-Force