🇺🇸
TPI-Abuse
2026-07-02 04:53:50
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 45.136.25.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.25.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:53:46.229683 2026] [security2:error] [pid 9427:tid 9427] [client 45.136.25.87:42465] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nihlabs.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nihlabs.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akXu2v-41xd1ck_s7HG2EAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 17:42:07
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.136.25.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.25.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 13:42:03.510726 2026] [security2:error] [pid 30549:tid 30549] [client 45.136.25.87:54663] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||damgoodit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "damgoodit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aimh6-fK76XYZZCwN8q6YgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 06:22:47
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.136.25.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.25.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 02:22:41.916026 2026] [security2:error] [pid 31927:tid 31927] [client 45.136.25.87:23921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||californiaappraisers.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "californiaappraisers.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aikCsQfSiabbYQH6Vb7oHwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2026-05-31 11:46:50
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇬🇧
relianoid.com
2026-05-24 09:26:07
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇫🇷
tilellit.pro
2026-02-15 09:37:58
(4 months ago)
Fail2Ban banned 45.136.25.87 for security violations in jail wp-armour. Log: 2026/02/15 09:37:57 [er ...
show more
Fail2Ban banned 45.136.25.87 for security violations in jail wp-armour. Log: 2026/02/15 09:37:57 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.136.25.87 | Target: wplogin" , client: 45.136.25.87, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
2026-01-29 14:03:14
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.29 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.29 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
fbarela
2025-10-10 02:00:21
(8 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-09-02 09:37:23
(10 months ago)
(mod_security) mod_security (id:210831) triggered by 45.136.25.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 45.136.25.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 02 05:37:15.537400 2025] [security2:error] [pid 17828:tid 17828] [client 45.136.25.87:36261] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||backstore.com|F|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/usage_202509.html"] [unique_id "aLa6yzFQT2rO-q78uMmyyAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack