🇺🇸
TPI-Abuse
2026-10-28 16:05:35
(53 minutes ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:05:32.107100 2026] [security2:error] [pid 9227:tid 9227] [client 217.145.224.69:43783] M ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:05:32.107100 2026] [security2:error] [pid 9227:tid 9227] [client 217.145.224.69:43783] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||joeordie.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joeordie.com"] [uri "/home/life/page/2/"] [unique_id "auIdTGNG6wWWccUT130_TQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-10-17 21:13:13
(1 week ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
🇩🇪
4server
2026-09-15 15:26:53
(1 month ago)
[TueSep1517:26:51.6009142026][security2:error][pid3451872:tid3451912][client217.145.224.69:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\ ...
show more
[TueSep1517:26:51.6009142026][security2:error][pid3451872:tid3451912][client217.145.224.69:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ci-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqlju9RVAqE3d3ylCzGmmAAAAUM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
Tilellit.PRO
2026-05-21 22:54:55
(5 months ago)
Fail2Ban banned 217.145.224.69 for security violations in jail wp-armour. Log: 2026/05/21 22:54:55 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 217.145.224.69 | Target: wplogin" , client: 217.145.224.69, server: [REDACTED], reque ...
show more
Fail2Ban banned 217.145.224.69 for security violations in jail wp-armour. Log: 2026/05/21 22:54:55 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 217.145.224.69 | Target: wplogin" , client: 217.145.224.69, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-05-19 23:35:35
(5 months ago)
Fail2Ban banned 217.145.224.69 for security violations in jail wp-armour. Log: 2026/05/19 23:35:35 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 217.145.224.69 | Target: wplogin" , client: 217.145.224.69, server: [REDACTED], reque ...
show more
Fail2Ban banned 217.145.224.69 for security violations in jail wp-armour. Log: 2026/05/19 23:35:35 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 217.145.224.69 | Target: wplogin" , client: 217.145.224.69, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇨🇿
lp
2025-03-20 16:28:16
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.69
2025-03-20T16:14:35+01:00 vpn Access-Reject 'eddie69' station: 217.145.224.69 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.69
2025-03-20T16:14:35+01:00 vpn Access-Reject 'eddie69' station: 217.145.224.69 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-03-17 01:24:09
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.69
2025-03-17T01:39:25+01:00 vpn Access-Reject 'kpearce' station: 217.145.224.69 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.69
2025-03-17T01:39:25+01:00 vpn Access-Reject 'kpearce' station: 217.145.224.69 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-16 16:49:25
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 217.145.224.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 12:49:19.520447 2025] [security2:error] [pid 26835:tid 26835] [client 217.145.224.69:49553] ...
show more
(mod_security) mod_security (id:211120) triggered by 217.145.224.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 12:49:19.520447 2025] [security2:error] [pid 26835:tid 26835] [client 217.145.224.69:49553] [client 217.145.224.69] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||anthonyanimalclinic.net|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/wp-super-cache/js/cache-loader.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anthonyanimalclinic.net"] [uri "/wp-content/plugins/wp-super-cache/js/cache-loader.php"] [unique_id "Z9cBDwP6wFBurnJB6QkyqAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-11 07:29:53
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 217.145.224.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 11 03:29:50.444879 2025] [security2:error] [pid 14970:tid 14970] [client 217.145.224.69:60033] ...
show more
(mod_security) mod_security (id:211120) triggered by 217.145.224.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 11 03:29:50.444879 2025] [security2:error] [pid 14970:tid 14970] [client 217.145.224.69:60033] [client 217.145.224.69] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||advantagesystemsgroup.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/canto/includes/lib/download.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "advantagesystemsgroup.com"] [uri "/wp-content/plugins/canto/includes/lib/download.php"] [unique_id "Z8_mbmETN1P-MRHI5LYQWgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-26 20:22:01
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 217.145.224.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 26 15:21:55.249200 2025] [security2:error] [pid 292235:tid 292235] [client 217.145.224.69:3871 ...
show more
(mod_security) mod_security (id:211120) triggered by 217.145.224.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 26 15:21:55.249200 2025] [security2:error] [pid 292235:tid 292235] [client 217.145.224.69:38717] [client 217.145.224.69] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "11"] [msg "COMODO WAF: Remote File Inclusion Attack||www.sutherlandyogastudio.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/canto/includes/lib/download.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sutherlandyogastudio.com"] [uri "/wp-content/plugins/canto/includes/lib/download.php"] [unique_id "Z79345l385L31PvtveO5vgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-11-21 21:11:26
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇩🇪
NxtGenIT
2024-05-29 21:08:57
(2 years ago)
217.145.224.69 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt
Brute-Force
🇵🇱
TI
2023-11-01 00:21:33
(2 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
🇿🇦
IrisFlower
2023-05-30 03:47:01
(3 years ago)
Unauthorized connection attempt detected from IP address 217.145.224.69 to port 873 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2023-05-29 22:37:51
(3 years ago)
Unauthorized connection attempt detected from IP address 217.145.224.69 to port 873 [J]
Port Scan
Hacking
