🇫🇷
Sklurk
2026-10-25 07:54:09
(16 hours ago)
Web App Attack
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-04-30 11:27:14
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 07:27:09.791402 2026] [security2:error] [pid 30705:tid 30705] [client 45.148.126.182:39085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lopansri.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lopansri.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afM8jeWNFoZj253G177gTgAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-04-29 21:23:27
(5 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-04-24 15:31:12
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 11:31:05.182048 2026] [security2:error] [pid 2654:tid 2659] [client 45.148.126.182:35233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||trejbal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "trejbal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeuMudtaugV1BGji__2SvgAAAEM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-04-21 00:54:05
(6 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
kosada.com
2026-04-19 23:49:24
(6 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-04-19 22:39:00
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 18:38:53.657078 2026] [security2:error] [pid 3977731:tid 3977731] [client 45.148.126.182:51019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||megaandina.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "megaandina.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeVZfdJO1BuEkmTJZf31CgAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-17 10:52:33
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 06:52:29.487903 2026] [security2:error] [pid 3623:tid 3623] [client 45.148.126.182:12735] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theholleys.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theholleys.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aeIQ7Qg0jneB8sD03kuO8wAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-20 09:46:56
(8 months ago)
Forum/form spam
Web Spam
🇩🇪
LRob
2025-11-12 20:50:51
(11 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-16 11:36:21
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.126.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 07:36:16.343668 2025] [security2:error] [pid 3006:tid 3006] [client 45.148.126.182:31079] [client 45.148.126.182] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||staben.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z9a3sOVQL0RvztcLgFbgDAAAAAM"], referer: https://staben.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-02-05 23:50:03
(1 year ago)
Unauthorized VPN login attempts: 3 attempts were recorded from 45.148.126.182
2025-02-05T23:43:33+01 ...
show more
Unauthorized VPN login attempts: 3 attempts were recorded from 45.148.126.182
2025-02-05T23:43:33+01:00 vpn Access-Reject 'andy' station: 45.148.126.182 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-02-05T23:43:56+01:00 vpn Access-Reject 'mailin-08' station: 45.148.126.182 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-02-05T23:50:20+01:00 vpn Access-Reject 'bored' station: 45.148.126.182 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2025-02-04 04:56:55
(1 year ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
lp
2025-01-31 13:22:16
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.182
2025-01-31T13:50:36+01 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.182
2025-01-31T13:50:36+01:00 vpn Access-Reject 'Medical Records ' station: 45.148.126.182 auth-type: - realm: - nas: <redacted> called: <redacted> => address-pool: - msg: 'Rejected: User-Name contains whitespace'
show less
Brute-Force
Web App Attack
