🇺🇸
TPI-Abuse
2026-10-26 16:21:57
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:21:50.978125 2026] [security2:error] [pid 32582:tid 32604] [client 45.148.234.57:11399] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:21:50.978125 2026] [security2:error] [pid 32582:tid 32604] [client 45.148.234.57:11399] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jeflis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jeflis.com"] [uri "/about.html"] [unique_id "at9-HpG7_oJtAqw-vYQmaAAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 13:50:11
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 09:50:04.670730 2026] [security2:error] [pid 9857:tid 9857] [client 45.148.234.57:44275] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 09:50:04.670730 2026] [security2:error] [pid 9857:tid 9857] [client 45.148.234.57:44275] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aim-controls.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aim-controls.com"] [uri "/application-jdr-cabler.php"] [unique_id "aty3jCs11MoBtd9DMGN1BwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 03:40:07
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 23:40:02.240689 2026] [security2:error] [pid 22427:tid 22427] [client 45.148.234.57:18983] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 23:40:02.240689 2026] [security2:error] [pid 22427:tid 22427] [client 45.148.234.57:18983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.truthsabouthealthcare.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.truthsabouthealthcare.com"] [uri "/costs/care-coordination/"] [unique_id "atwokuRjBteiD_MluqWm2gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-08-19 07:26:09
(2 months ago)
(wplogin_block) Blocked WP-Login Access Attempt 45.148.234.57 (US/United States/New York/New York/-/[AS26548 PUREVOLTAGE-INC]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.148.234.57 - - [19/Aug/2026:10:2 ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 45.148.234.57 (US/United States/New York/New York/-/[AS26548 PUREVOLTAGE-INC]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.148.234.57 - - [19/Aug/2026:10:22:46 +0300] "GET /wp-login.php HTTP/1.1" 200 11834 "http://adoro.gr/wp-login.php" "curl/7.88.1"
show less
Port Scan
🇺🇸
oralunal
2026-08-18 00:18:48
(2 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-07-15 06:27:43
(3 months ago)
HTTP flood against /retreat-corp on Apache webserver
Brute-Force
🇺🇸
nationaleventpros.com
2026-06-14 23:22:32
(4 months ago)
WordPress login attempt
Brute-Force
🇺🇸
Jason Howell
2026-06-02 19:22:40
(4 months ago)
45.148.234.57 - - [02/Jun/2026:13:44:38 -0500] "GET /wp-login.php HTTP/1.1" 200 4494 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.148.234.57 - - [02/Jun/2026:13:44 ...
show more
45.148.234.57 - - [02/Jun/2026:13:44:38 -0500] "GET /wp-login.php HTTP/1.1" 200 4494 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.148.234.57 - - [02/Jun/2026:13:44:38 -0500] "POST /wp-login.php HTTP/1.1" 200 4596 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.148.234.57 - - [02/Jun/2026:13:44:39 -0500] "GET /wp-admin/ HTTP/1.1" 302 2817 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.148.234.57 - - [02/Jun/2026:13:44:40 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.abstractco.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 6654 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.148.234.57 - - [02/Jun/2026:14:22:39
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 11:50:29
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 07:50:24.125651 2026] [security2:error] [pid 20200:tid 20200] [client 45.148.234.57:59967] M ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 07:50:24.125651 2026] [security2:error] [pid 20200:tid 20200] [client 45.148.234.57:59967] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||charamand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "charamand.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahwggOb9TlAFegxcd_0UxgAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 08:54:26
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 04:54:19.004825 2026] [security2:error] [pid 19001:tid 19001] [client 45.148.234.57:57335] M ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.234.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 04:54:19.004825 2026] [security2:error] [pid 19001:tid 19001] [client 45.148.234.57:57335] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||akmanoto.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "akmanoto.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahlUO1rSEx_KkKw6U_8-_AAAACA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-28 03:20:05
(5 months ago)
Web vulnerability probing: /wp-json/wp/v2/users
Web App Attack
🇩🇪
kjaerulff
2026-05-14 18:16:11
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
octageeks.com
2026-05-13 04:08:37
(5 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇺🇸
interbiznw.com
2026-04-18 06:17:09
(6 months ago)
wordpress-bruteforce
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
interbiznw.com
2026-04-08 11:39:50
(6 months ago)
wordpress-fuzzing
Hacking
Brute-Force
Exploited Host
Web App Attack
