🇺🇸
TPI-Abuse
2026-11-11 09:17:39
UTC ·
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 45.132.184.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:17:35.369728 2026] [security2:error] [pid 30748:tid 30748] [client 45.132.184.216:48939] ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.184.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:17:35.369728 2026] [security2:error] [pid 30748:tid 30748] [client 45.132.184.216:48939] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arsenalfordemocracy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/users/7"] [unique_id "avQyr9iXYBOw3HbflJ4KvQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 00:54:10
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.132.184.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:54:05.851616 2026] [security2:error] [pid 28811:tid 28811] [client 45.132.184.216:50955] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.184.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:54:05.851616 2026] [security2:error] [pid 28811:tid 28811] [client 45.132.184.216:50955] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kountz.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/placesearch.php"] [unique_id "avO8rSPDLCzEJLkIj1mB_QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 09:22:21
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.132.184.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:22:15.980850 2026] [security2:error] [pid 11386:tid 11400] [client 45.132.184.216:25513] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.184.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:22:15.980850 2026] [security2:error] [pid 11386:tid 11400] [client 45.132.184.216:25513] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/tabusivelyg1055131"] [unique_id "avLiRyxsrvWvP4yeLXsczwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 08:47:48
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.132.184.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:47:41.397118 2026] [security2:error] [pid 9331:tid 9331] [client 45.132.184.216:58205] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.184.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 03:47:41.397118 2026] [security2:error] [pid 9331:tid 9331] [client 45.132.184.216:58205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "aurxLfsyTQoT1DxOA98A8gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-03-12 07:41:49
UTC ·
(7 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.184.216
2026-03-12T08:19:34+01:00 vpn Access-Reject 'scorpian' station: 45.132.184.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.184.216
2026-03-12T08:19:34+01:00 vpn Access-Reject 'scorpian' station: 45.132.184.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-03-07 06:02:07
UTC ·
(8 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.184.216
2026-03-07T06:25:07+01:00 vpn Access-Reject 'beavis1' station: 45.132.184.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.184.216
2026-03-07T06:25:07+01:00 vpn Access-Reject 'beavis1' station: 45.132.184.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-03-05 10:41:19
UTC ·
(8 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.184.216
2026-03-05T11:32:03+01:00 vpn Access-Reject 'jack1234' station: 45.132.184.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.184.216
2026-03-05T11:32:03+01:00 vpn Access-Reject 'jack1234' station: 45.132.184.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇪🇸
Cognisant-Security
2026-01-29 08:28:00
UTC ·
(9 months ago)
Attempts to login using invalid user credentials
Hacking
Web App Attack
🇨🇦
wil.com
2025-04-01 10:45:10
UTC ·
(1 year ago)
GlobalProtect login attempts with user soadevl.
VPN IP
Brute-Force
🇦🇺
MAGIC
2025-03-09 03:08:59
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇻🇳
Xuan Can
2025-01-31 00:43:14
UTC ·
(1 year ago)
(mod_security) mod_security (id:6) triggered by 45.132.184.216 (RU/Russia/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 31 07:43:06.456623 2025] [security2:error] [pid 28616:tid 28661] [client 45.132.184 ...
show more
(mod_security) mod_security (id:6) triggered by 45.132.184.216 (RU/Russia/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 31 07:43:06.456623 2025] [security2:error] [pid 28616:tid 28661] [client 45.132.184.216:0] [client 45.132.184.216] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.sieuthimaychu.vn"] [uri "/wp-login.php"] [unique_id "Z5wcmuqXfQJYm-Jh5irZIgAAAsc"]
show less
Brute-Force
SSH
🇬🇧
noise.agency
2025-01-15 07:26:38
UTC ·
(1 year ago)
(wordpress) Failed wordpress login from 45.132.184.216 (RU/Russia/-)
Brute-Force
🇷🇺
sms.ru
2024-09-28 16:45:09
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇺🇸
hostseries
2024-07-14 19:02:08
UTC ·
(2 years ago)
Trigger: LF_DISTATTACK
Brute-Force
🇨🇦
wil.com
2024-04-02 18:15:57
UTC ·
(2 years ago)
GlobalProtect login attempts with user demo.
VPN IP
Brute-Force
