๐ง๐ช
Saec
2026-06-05 16:45:09
(11 hours ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (2ร on saec.me)
Port Scan
Web App Attack
2026-06-01 12:13:07
(4 days ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-05-21 15:47:23
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 11:47:18.175514 2026] [security2:error] [pid 21555:tid 21555] [client 45.148.124.80:18637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||n4fh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "n4fh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag8pBpRs18B_uFl2pevovAAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-21 09:38:04
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 05:37:59.586579 2026] [security2:error] [pid 25657:tid 25657] [client 45.148.124.80:16651] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||echelonts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "echelonts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag7Sd-5NNHDJJSzZAkA7-wAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
inlink.ltd
2026-05-18 07:06:39
(2 weeks ago)
Known malicious PHP file or CMS probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-04 15:31:28
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 10:31:24.585895 2026] [security2:error] [pid 27047:tid 27047] [client 45.148.124.80:51049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||halblog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "halblog.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aahQTJhIsmyLY_ZHyNSsUAAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-04 04:00:41
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 23:00:36.194029 2026] [security2:error] [pid 7556:tid 7556] [client 45.148.124.80:44239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bobfaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bobfaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaeuZF-ojseclaeC0us49AAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-01-23 00:56:46
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 19:56:38.748794 2026] [security2:error] [pid 14207:tid 14207] [client 45.148.124.80:42113] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drgracetomastolentino.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drgracetomastolentino.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLHRuzdnvQznX6gwjK0DwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-01-22 19:38:48
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 14:38:40.824648 2026] [security2:error] [pid 3554793:tid 3554817] [client 45.148.124.80:19849] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sandiegosamsolo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sandiegosamsolo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXJ8wH6LDQmdXnEXOB192QAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
stinpriza
2025-12-16 23:04:44
(5 months ago)
Web App Attack
Web App Attack
๐ซ๐ท
masterguru
2025-12-16 05:54:00
(5 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.148.124.80 (US/United States/-): 1 in the l ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.148.124.80 (US/United States/-): 1 in the last 3600 secs (0-196)
show less
Hacking
๐น๐ท
cagatayakinci.com
2025-11-24 01:37:58
(6 months ago)
Web App Attack was Blocked. IP has been banned for 1 day Pazartesi, 24 Kasฤฑm 2025 04:37 รร
Web App Attack
๐ช๐ธ
10dencehispahard SL
2025-11-21 07:48:59
(6 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
2024-09-28 04:12:23
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2024-08-07 07:01:38
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.124.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 03:01:24.974118 2024] [security2:error] [pid 1776309:tid 1776362] [client 45.148.124.80:50065] [client 45.148.124.80] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||orthopedica.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "orthopedica.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ZrMbxI8AREfXVtoZgAt7SwAAAZY"]
show less
Brute-Force
Bad Web Bot
Web App Attack