🇺🇸
TPI-Abuse
2026-04-30 04:32:41
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 00:32:34.444539 2026] [security2:error] [pid 24328:tid 24328] [client 45.145.131.126:33087] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||shhcenter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "shhcenter.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afLbYseUrjRcloxILz5ucQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 03:50:39
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 23:50:32.007270 2026] [security2:error] [pid 10233:tid 10338] [client 45.145.131.126:29895] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||seriousgames-system.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "seriousgames-system.info"] [uri "/wp-json/wp/v2/users"] [unique_id "afLRiMMVT5tTSIG86jyjqwAAANg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 08:03:21
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 04:03:15.313056 2026] [security2:error] [pid 26770:tid 26770] [client 45.145.131.126:46411] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||touchmypython.bwill.dev|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "touchmypython.bwill.dev"] [uri "/s3cmd.ini"] [unique_id "afG7Qw_rBnEOzTlCdHQLFwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 06:06:49
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 02:06:44.858363 2026] [security2:error] [pid 30401:tid 30401] [client 45.145.131.126:37785] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||spectorworld.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spectorworld.com"] [uri "/s3cmd.ini"] [unique_id "afBOdBZ7sx2e7lcTi2vpWwAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 23:54:35
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 19:54:31.041396 2026] [security2:error] [pid 11652:tid 11652] [client 45.145.131.126:50699] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||greenquince.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greenquince.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae_3N4K73nrBO3AHkPGzewAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 13:05:27
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 09:05:23.447293 2026] [security2:error] [pid 3070:tid 3070] [client 45.145.131.126:49783] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ftiptondds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ftiptondds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae9fE2NCK6tYaJH7otuj5gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 05:57:14
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.145.131.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 01:57:08.753016 2026] [security2:error] [pid 1740:tid 1740] [client 45.145.131.126:35973] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gegraphics.biz|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gegraphics.biz"] [uri "/s3cmd.ini"] [unique_id "ae76tPsIVS1gPIioKsVH3QAAAGs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-04-23 20:50:35
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-11-21 06:40:12
(6 months ago)
block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1
Bad Web Bot
2025-09-05 07:36:23
(9 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
stinpriza
2025-08-21 12:47:34
(9 months ago)
Web App Attack
Web App Attack
🇺🇸
Anonymous
2025-02-28 16:00:00
(1 year ago)
Brute force attack detected from 45.145.131.126
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
Anonymous
2025-02-28 16:00:00
(1 year ago)
Brute force attack detected from 45.145.131.126
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
Anonymous
2025-02-28 16:00:00
(1 year ago)
Brute force attack detected from 45.145.131.126
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
Anonymous
2025-02-28 16:00:00
(1 year ago)
Brute force attack detected from 45.145.131.126
DDoS Attack
Brute-Force
Web App Attack