🇺🇸
TPI-Abuse
2026-10-25 17:19:58
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.140.207.170 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 45.140.207.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 13:19:53.165850 2026] [security2:error] [pid 7413:tid 7413] [client 45.140.207.170:12819] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||businessvaluationapp.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "businessvaluationapp.com"] [uri "/business-valuation.php"] [unique_id "at46OTJJs_cXyu7MLc1RhQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 16:07:27
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2026-05-27 00:31:38
(5 months ago)
SQL injection, multiple attempts.
SQL Injection
🇩🇪
8legz.net
2026-04-08 00:47:11
(6 months ago)
[Wed Apr 08 01:47:06.584064 2026] [php:error] [pid 883931] [client 45.140.207.170:59711] script '/va ...
show more
[Wed Apr 08 01:47:06.584064 2026] [php:error] [pid 883931] [client 45.140.207.170:59711] script '/var/www/html/xmlrpc.php' not found or unable to stat
[Wed Apr 08 01:47:09.545319 2026] [php:error] [pid 883932] [client 45.140.207.170:38825] script '/var/www/html/wp-login.php' not found or unable to stat, referer: https://www.google.com
[Wed Apr 08 01:47:11.128169 2026] [php:error] [pid 883934] [client 45.140.207.170:12301] script '/var/www/html/wp-login.php' not found or unable to stat, referer: https://www.google.com
...
show less
Brute-Force
2026-03-04 23:02:43
(7 months ago)
Failed Wordpress login
Hacking
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-01-18 11:30:09
(9 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 18:26:44
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 45.140.207.170 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 45.140.207.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 13:26:36.084611 2025] [security2:error] [pid 20406:tid 20406] [client 45.140.207.170:26847] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||3fabgals.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "3fabgals.com"] [uri "/"] [unique_id "aRjF3K1Ynx0R3fYz3xFdewAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-07-04 22:25:04
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇬🇧
thetomtaylor.co.uk
2025-07-03 06:40:34
(1 year ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa02]
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-03-27 11:00:30
(1 year ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇮🇩
BPS-StatisticsIndonesia
2025-03-09 17:31:11
(1 year ago)
WP Login Scan Activities
Web App Attack
🇺🇸
TPI-Abuse
2025-03-08 11:38:27
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.140.207.170 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.140.207.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 08 06:38:23.377024 2025] [security2:error] [pid 14372:tid 14372] [client 45.140.207.170:25871] [client 45.140.207.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lexvaz.com"] [uri "/.env"] [unique_id "Z8wsL-BM5j7F4AJpniKRUgAAABU"], referer: https://tasamm.com/about/ggg261.html
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-11-20 08:55:30
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇲🇾
syokadmin
2024-11-19 16:17:44
(1 year ago)
Brute-Force
2024-11-16 21:59:55
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH