🇺🇸
TPI-Abuse
2026-07-14 18:27:54
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 45.229.53.148 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 45.229.53.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 14:27:49.736195 2026] [security2:error] [pid 26827:tid 26827] [client 45.229.53.148:59738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.229.53.148 (+1 hits since last alert)|globalsolutions.technology|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "globalsolutions.technology"] [uri "/xmlrpc.php"] [unique_id "alZ_pWBXyjpUkVObN1M8tQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-14 18:24:22
(1 day ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇺🇸
TPI-Abuse
2026-07-08 14:22:59
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 45.229.53.148 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 45.229.53.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 10:22:53.537399 2026] [security2:error] [pid 1754:tid 1754] [client 45.229.53.148:50617] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.229.53.148 (+1 hits since last alert)|hotpay.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hotpay.co"] [uri "/xmlrpc.php"] [unique_id "ak5dPU-zVgTguasaENs_QQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-08 14:20:39
(1 week ago)
(wordpress) Failed wordpress login from 45.229.53.148 (BR/Brazil/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-02 10:31:36
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 45.229.53.148 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 45.229.53.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 06:31:31.943521 2026] [security2:error] [pid 6001:tid 6001] [client 45.229.53.148:59121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.229.53.148 (+1 hits since last alert)|cosplayculture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cosplayculture.com"] [uri "/xmlrpc.php"] [unique_id "akY-A6VbGuKJDNKOkqGQawAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
IrisFlower
2021-04-14 03:29:10
(5 years ago)
Unauthorized connection attempt detected from IP address 45.229.53.148 to port 5555 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2021-04-13 23:55:41
(5 years ago)
Unauthorized connection attempt detected from IP address 45.229.53.148 to port 80 [J]
Port Scan
Hacking
🇲🇩
iHost
2021-04-09 19:44:11
(5 years ago)
*Port Scan* detected from 45.229.53.148 (BR/Brazil/-). 3 hits in the last 221 seconds; Ports: *; Dir ...
show more
*Port Scan* detected from 45.229.53.148 (BR/Brazil/-). 3 hits in the last 221 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Apr 10 02:44:05 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=45.229.53.148 DST=31.131.1.74 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=25973 DF PROTO=TCP SPT=36802 DPT=7574 WINDOW=28800 RES=0x00 SYN URGP=0
Apr 10 02:44:06 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=45.229.53.148 DST=31.131.1.74 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=25974 DF PROTO=TCP SPT=36802 DPT=7574 WINDOW=28800 RES=0x00 SYN URGP=0
Apr 10 02:44:08 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=45.229.53.148 DST=31.131.1.74 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=25975 DF PROTO=TCP SPT=36802 DPT=7574 WINDOW=28800 RES=0x00 SYN URGP=0
show less
Port Scan
🇿🇦
IrisFlower
2021-04-09 00:41:42
(5 years ago)
Unauthorized connection attempt detected from IP address 45.229.53.148 to port 7574 [J]
Port Scan
Hacking
🇲🇩
iHost
2021-03-13 05:03:38
(5 years ago)
*Port Scan* detected from 45.229.53.148 (BR/Brazil/-). 3 hits in the last 100 seconds; Ports: *; Dir ...
show more
*Port Scan* detected from 45.229.53.148 (BR/Brazil/-). 3 hits in the last 100 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Mar 13 12:03:31 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=45.229.53.148 DST=31.131.1.55 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=12125 DF PROTO=TCP SPT=50369 DPT=8443 WINDOW=28800 RES=0x00 SYN URGP=0
Mar 13 12:03:32 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=45.229.53.148 DST=31.131.1.55 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=12126 DF PROTO=TCP SPT=50369 DPT=8443 WINDOW=28800 RES=0x00 SYN URGP=0
Mar 13 12:03:34 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=45.229.53.148 DST=31.131.1.55 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=12127 DF PROTO=TCP SPT=50369 DPT=8443 WINDOW=28800 RES=0x00 SYN URGP=0
show less
Port Scan