🇺🇸
TPI-Abuse
2026-06-12 12:03:05
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 08:03:00.316541 2026] [security2:error] [pid 2662:tid 2662] [client 45.132.186.99:15421] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oscarssons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oscarssons.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiv1dLtPYQUZZuemNT-h3QAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 07:40:36
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:40:33.250594 2026] [security2:error] [pid 20229:tid 20229] [client 45.132.186.99:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||antitribu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "antitribu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aifDcVd9BEZj4yqHwNZf2wAAACU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 23:04:26
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 19:04:20.264207 2026] [security2:error] [pid 1966:tid 1966] [client 45.132.186.99:22467] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cbcfargo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cbcfargo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiNV9PiHJHbnEbKA6yG_8wAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 21:48:17
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 17:48:12.219268 2026] [security2:error] [pid 29301:tid 29325] [client 45.132.186.99:51029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paidsearchconsulting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paidsearchconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahdmnKoE-4HP_1e3fuxL7gAAAEM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 22:51:43
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 18:51:37.837172 2026] [security2:error] [pid 7876:tid 7876] [client 45.132.186.99:27049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chrismonty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chrismonty.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahOA-YMBVay1mJM3_zaHQAAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-22 16:19:06
(3 weeks ago)
Web password guessing
Brute-Force
🇺🇸
ipblock.com
2026-05-17 22:45:00
(3 weeks ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 15:02:38
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 11:02:34.359556 2026] [security2:error] [pid 1486:tid 1486] [client 45.132.186.99:9731] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stagemadrid.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stagemadrid.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agnYiuZFeMKPOMHt9MkM8gAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 14:51:23
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 10:51:16.223584 2026] [security2:error] [pid 4618:tid 4627] [client 45.132.186.99:23315] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pref-realestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pref-realestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agSP5JKylUN_1luLpQR6-gAAAUc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-05 08:25:35
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 03:25:30.011241 2025] [security2:error] [pid 5337:tid 5337] [client 45.132.186.99:32525] [client 45.132.186.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.hauffcompany.com"] [uri "/wp-config.php.original"] [unique_id "Z8gKehdUpT1JnQdBZsx8nwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
[email protected]
2025-02-18 14:00:37
(1 year ago)
""
DNS Compromise
DNS Poisoning
DDoS Attack
FTP Brute-Force
Phishing
Open Proxy
Web Spam
Email Spam
Blog Spam
VPN IP
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
BlueWire Hosting
2025-02-15 05:10:08
(1 year ago)
Scanning for Laravel vulnerabilities
Web App Attack
🇷🇺
sms.ru
2024-09-26 06:05:06
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
🇺🇸
TPI-Abuse
2024-07-22 17:45:07
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.186.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 22 13:44:58.522136 2024] [security2:error] [pid 13999:tid 14107] [client 45.132.186.99:31281] [client 45.132.186.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||keithfamily.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "keithfamily.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Zp6amvOnmH0DUYPbdFkIBwAAAlQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
TI
2023-11-01 01:05:27
(2 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot