🇺🇸
TPI-Abuse
2026-04-30 06:50:14
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.145.128.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.128.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 02:50:10.538545 2026] [security2:error] [pid 10603:tid 10603] [client 45.145.128.34:40939] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soudertonbigred.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soudertonbigred.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afL7olTk9opbqKB33ru0ZwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 02:00:00
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.145.128.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.128.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 21:59:54.740298 2026] [security2:error] [pid 10815:tid 10824] [client 45.145.128.34:47371] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||northtexaslive.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "northtexaslive.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afFmGhKjFSLEI6d4cpUPqwAAAUc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:34
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇩🇪
kjaerulff
2025-11-21 10:08:31
(6 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
2025-11-21 04:20:50
(6 months ago)
wordpress-trap
Web App Attack
🇺🇸
TPI-Abuse
2025-09-06 20:35:51
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 45.145.128.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.145.128.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 16:35:48.065508 2025] [security2:error] [pid 31102:tid 31102] [client 45.145.128.34:51449] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Apex II/Thumbs.db"] [unique_id "aLybJIRKDtTgnVVAp9Mu-wAAAAY"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Apex%20II/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-05-10 04:56:45
(1 year ago)
Bad Web Bot
2025-02-17 16:28:39
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-01-18 14:43:49
(1 year ago)
sql injection
Web App Attack
2025-01-18 07:22:46
(1 year ago)
sql injection
Web App Attack
2024-09-27 23:40:09
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
🇵🇱
sefinek.net
2024-08-30 14:32:25
(1 year ago)
This IP address has been identified as generating artificial traffic on websites following the purch ...
show more
This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (iPad; CPU OS 16_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/120.0.6099.199 Mobile/15E148 Safari/604.1 - en-US - -
show less
Bad Web Bot
🇵🇱
sefinek.net
2024-08-30 14:32:25
(1 year ago)
This IP address has been identified as generating artificial traffic on websites following the purch ...
show more
This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (iPad; CPU OS 16_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/120.0.6099.199 Mobile/15E148 Safari/604.1 - en-US - -
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2024-08-24 12:56:03
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.145.128.34 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.128.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 24 08:56:00.047631 2024] [security2:error] [pid 31891:tid 31891] [client 45.145.128.34:52871] [client 45.145.128.34] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||acquivest.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "acquivest.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZsnYYHItCmJboF7wd50dUAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-08-20 14:02:57
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH