πΊπΈ
TPI-Abuse
2026-03-22 03:22:57
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.145.129.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.129.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 23:22:50.871125 2026] [security2:error] [pid 30889:tid 30889] [client 45.145.129.49:26467] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dmasoftlab.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dmasoftlab.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab9gitop1LblbOLKCDD6BAAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-02-21 02:27:24
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.145.129.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.129.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 21:27:19.350292 2026] [security2:error] [pid 21067:tid 21087] [client 45.145.129.49:9051] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rawhabitat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rawhabitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZkYB8-lS8Lhu7yrj7mPigAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-02-21 01:34:22
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.145.129.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.129.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 20:34:18.964392 2026] [security2:error] [pid 3124:tid 3147] [client 45.145.129.49:61417] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||guitarprimer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "guitarprimer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZkLmskw51OuVznhtXwDNwAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-09-30 04:31:41
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
π·πΊ
sms.ru
2024-09-22 20:00:10
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
Anonymous
2024-09-14 09:36:35
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
π¨π
backslash
2023-05-03 03:25:20
(3 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
π¨π
backslash
2022-04-30 02:27:57
(4 years ago)
bad bot: robots.txt
Bad Web Bot
π¨π¦
Peter Chargen
2022-01-11 15:52:55
(4 years ago)
PHP email form abuse/SPAM attempt
Email Spam
Anonymous
2021-12-27 17:16:11
(4 years ago)
SPAM BOT - BANNED
Email Spam
Bad Web Bot
π¨π
backslash
2021-12-11 23:50:33
(4 years ago)
honeypot, robots.txt
Bad Web Bot
π―π΅
Nanoniele
2021-06-14 01:47:52
(4 years ago)
2021/06/14 05:11:07; /archive/nanoniele_archive.cgi?c=4594%2F%2A%2A%2F%2F%2A%2A%2FUNION%2F%2A%2A%2FA ...
show more
2021/06/14 05:11:07; /archive/nanoniele_archive.cgi?c=4594%2F%2A%2A%2F%2F%2A%2A%2FUNION%2F%2A%2A%2FALL%2F%2A%2A%2FSELECT%2F%2A%2A%2F%28CHAR%2887%29%2BCHAR%...
show less
SQL Injection
π¬π§
Steve
2021-06-05 10:08:11
(5 years ago)
SQL Injection Attempts
SQL Injection
Brute-Force
π―π΅
Nanoniele
2021-06-01 07:16:51
(5 years ago)
Firefox/16.0; .cgi?c=4580%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2 ...
show more
Firefox/16.0; .cgi?c=4580%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x34505148%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x706d6269%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FTyjv 4580****OR**ROW(2018,1386)(SELECT**COUNT(*),CONCAT(0x34505148,(SELECT**(ELT(2836=2836,1))),0x706d6269,FLOOR(RAND(0)*2))x**FROM**(SELECT**2027**UNION**SELECT**8505**UNION**SELECT**7491**UNION**SELECT**4808)a**GROUP**BY**x)#**Tyjv
show less
SQL Injection
πΊπΈ
IrisFlower
2021-02-28 10:42:56
(5 years ago)
Unauthorized connection attempt detected from IP address 45.145.129.49 to port 443 [T]
Port Scan