🇺🇸
TPI-Abuse
2026-09-01 17:07:57
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 13:07:46.362952 2026] [security2:error] [pid 4718:tid 4718] [client 45.135.3.118:36079] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||halblog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "halblog.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apcGYqjVX9uqFhU0Zgjx8AAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-09-01 14:54:32
(5 hours ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-08-28 22:47:32
(3 days ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-27 03:28:43
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 23:28:35.697481 2026] [security2:error] [pid 24789:tid 24789] [client 45.135.3.118:22619] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harmonyexpos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harmonyexpos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao-u4_i6s-VloNk87Pql2QAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 21:39:29
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 17:39:20.402163 2026] [security2:error] [pid 2669887:tid 2669887] [client 45.135.3.118:54657] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||waterjetsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "waterjetsolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anuWiGRtnMXc2MmTklP89wAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-11 15:13:43
(3 weeks ago)
Web password guessing
Brute-Force
2026-08-11 03:57:21
(3 weeks ago)
FPROCO WEBEXPLOIT 45.135.3.118 (45.135.3.118)
Web App Attack
🇺🇸
kosada.com
2026-08-03 17:09:44
(4 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-02 20:57:55
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 16:57:47.412306 2026] [security2:error] [pid 3663173:tid 3663173] [client 45.135.3.118:48029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hshr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hshr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "am-vS6HkjAp38GfYSWFFmQAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 08:43:08
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 04:43:01.379430 2026] [security2:error] [pid 10113:tid 10113] [client 45.135.3.118:12995] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calvarycavaliers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ak4NlSlwImUeiRjPeBsHvgAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-29 09:11:40
(2 months ago)
Fail2Ban banned 45.135.3.118 for security violations in jail wp-armour. Log: 2026/06/29 09:11:39 [er ...
show more
Fail2Ban banned 45.135.3.118 for security violations in jail wp-armour. Log: 2026/06/29 09:11:39 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.135.3.118 | Target: wplogin" , client: 45.135.3.118, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 11:28:57
(2 months ago)
Fail2Ban banned 45.135.3.118 for security violations in jail wp-armour. Log: 2026/06/27 11:28:56 [er ...
show more
Fail2Ban banned 45.135.3.118 for security violations in jail wp-armour. Log: 2026/06/27 11:28:56 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.135.3.118 | Target: wplogin" , client: 45.135.3.118, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-03-24 11:59:02
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 07:58:54.368434 2026] [security2:error] [pid 11803:tid 11803] [client 45.135.3.118:18029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jackierankin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jackierankin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acJ8fplThsWz54VKhHwBEAAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-03-21 23:21:38
(5 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-03-17 06:34:27
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.135.3.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 02:34:17.834491 2026] [security2:error] [pid 18730:tid 18740] [client 45.135.3.118:46055] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pixelpushersdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelpushersdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abj16Xn08dFFgGP4n_0etwAAAMU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack