🇺🇸
TPI-Abuse
2026-05-13 21:11:39
(3 weeks ago)
(mod_security) mod_security (id:211030) triggered by 45.145.131.96 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211030) triggered by 45.145.131.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 17:11:27.213224 2026] [security2:error] [pid 16731:tid 16731] [client 45.145.131.96:49065] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||www.genesis-castle.com|F|2"] [data "Matched Data: (%'%~%'%|%|%( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/picture.php"] [unique_id "agTo_0zeag905qpOPHCtLAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 00:55:07
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.96 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 20:55:03.267650 2026] [security2:error] [pid 4062328:tid 4062340] [client 45.145.131.96:10469] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||piazzala.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "piazzala.com"] [uri "/"] [unique_id "aeAzZx7-K_l5y69xVlwCpgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-02-20 06:35:48
(3 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-13 15:05:23
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.145.131.96 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.131.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 10:05:20.165837 2026] [security2:error] [pid 21301:tid 21301] [client 45.145.131.96:30901] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lanuevaley.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lanuevaley.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aY89sCi2abGzkJl_seT47AAAAB8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2025-12-19 17:07:54
(5 months ago)
(From [email protected] ) Hi Team,
I typed your main service keywords into Google today, a ...
show more
(From [email protected] ) Hi Team,
I typed your main service keywords into Google today, and I noticed something frustrating. Your website is professionally designed, but it’s buried on Page 2.
Meanwhile, 2 or 3 of your direct competitors, who frankly have weaker websites than you—are sitting at the top of Page 1.
They are effectively "stealing" leads that were looking for you. They aren't better than you; they just have better SEO signals.
I’ve already analyzed exactly what they are doing differently.
If you want to see the comparison report, just reply "Yes" and I’ll send it over.
Cheers,
QIK
show less
Phishing
Web Spam
🇮🇹
Franco
2025-06-25 14:09:00
(11 months ago)
WP ATTACK
Hacking
Brute-Force
Web App Attack
🇲🇽
licjperezl
2025-06-05 18:03:12
(11 months ago)
Ataque de diccionario o DDoS en nuestros servicios en linea
Brute-Force
🇬🇧
thetomtaylor.co.uk
2024-10-25 14:05:21
(1 year ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa01]
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2024-10-25 13:47:13
(1 year ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa02]
Bad Web Bot
Web App Attack
🇩🇪
Bernhard Fürst
2023-01-01 23:05:24
(3 years ago)
Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 45.145.131.96, Reason:[4 ...
show more
Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 45.145.131.96, Reason:[45.145.131.96 (IL/Israel/-), 5 distributed pop3d attacks on account [[email protected] ] in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
🇬🇧
Steve
2021-10-18 15:18:35
(4 years ago)
SQL Injection Attempts
SQL Injection
Brute-Force
🇿🇦
IrisFlower
2021-08-13 22:26:45
(4 years ago)
Unauthorized connection attempt detected from IP address 45.145.131.96 to port 443 [J]
Port Scan
Hacking
🇺🇸
fortypoundhead
2021-07-28 17:58:34
(4 years ago)
Gatekeeper - SQL injection attempt
SQL Injection