🇺🇸
TPI-Abuse
2026-10-17 16:44:52
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 12:44:44.863523 2026] [security2:error] [pid 25399:tid 25399] [client 45.71.17.8:54203] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||holgerfeld.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "holgerfeld.com"] [uri "/mailto:[email protected] "] [unique_id "atOl_AAPyT6bJgNixvKmqgAAABQ"], referer: http://holgerfeld.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-10 12:43:38
(1 week ago)
Try to access /.git/HEAD
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 19:50:07
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 15:49:57.961026 2026] [security2:error] [pid 568:tid 568] [client 45.71.17.8:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.git/HEAD"] [unique_id "ar65ZXZddAJguf5kFZbCZQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
donarev419
2026-09-17 06:16:54
(1 month ago)
Connection to port 443 with data transfer.
Data preview:
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-09-02 09:30:39
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 05:30:34.189055 2026] [security2:error] [pid 4697:tid 4697] [client 45.71.17.8:64553] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||capitalswisscorp.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "apfsuhGtPyl2Ouea6GhiCAAAAAQ"], referer: http://CapitalSwissCorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-08-28 07:17:15
(1 month ago)
Enumerating paths that do not exist (scanning) | method: GET | path: /tel:+33221827827 | 2026-08-28 ...
show more
Enumerating paths that do not exist (scanning) | method: GET | path: /tel:+33221827827 | 2026-08-28 07:17 UTC
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 15:06:35
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:06:30.815081 2026] [security2:error] [pid 4907:tid 4907] [client 45.71.17.8:50725] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||holgerfeld.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "holgerfeld.com"] [uri "/mailto:[email protected] "] [unique_id "apBSds-P8iNaTIuLTqbLfQAAABI"], referer: http://holgerfeld.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 11:10:36
(2 months ago)
FortiWeb WAF: 22 attacks detected. Threat Score: 10796480. Types: Client Management(11), Signature D ...
show more
FortiWeb WAF: 22 attacks detected. Threat Score: 10796480. Types: Client Management(11), Signature Detection(11). Origin: United States.
show less
Web App Attack
2026-07-24 12:48:46
(2 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 08:23:34
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 04:23:29.328112 2026] [security2:error] [pid 21900:tid 21900] [client 45.71.17.8:51155] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.investorsfundingusa.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.investorsfundingusa.com"] [uri "/mailto:[email protected] "] [unique_id "aliVAac0eumxfBQqFZue_QAAABM"], referer: http://www.investorsfundingusa.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-06-07 01:09:18
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-31 22:47:03
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 18:46:56.050565 2026] [security2:error] [pid 7172:tid 7172] [client 45.71.17.8:56713] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.holgerfeld.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.holgerfeld.com"] [uri "/mailto:[email protected] "] [unique_id "ahy6YIO_9r2CSV_H9eFvygAAABU"], referer: http://www.holgerfeld.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-20 00:00:08
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 45.71.17.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 19:59:58.054669 2026] [security2:error] [pid 2628765:tid 2628765] [client 45.71.17.8:34221] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||capitalswisscorp.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "aeVsftZdjTHkGAJoW9nVbwAAAAE"], referer: http://capitalswisscorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-04-15 01:56:56
(6 months ago)
Fail2Ban banned 45.71.17.8 for security violations in jail nginx-aggressive. Log: 2026/04/15 01:56:5 ...
show more
Fail2Ban banned 45.71.17.8 for security violations in jail nginx-aggressive. Log: 2026/04/15 01:56:50 [crit] SSL_read() failed (SSL: error:0A00010B:SSL routines::wrong version number error:0A000139:SSL routines::record layer failure) while keepalive, client: 45.71.17.8, server: [REDACTED]
2026/04/15 01:56:55 [crit] SSL_read() failed (SSL: error:0A00010B:SSL routines::wrong version number error:0A000139:SSL routines::record layer failure) while keepalive, client: 45.71.17.8, server: [REDACTED]
...
show less
Bad Web Bot
Web App Attack
2026-04-14 21:02:15
(6 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-02.45.71.17.8.web-spammers. ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-02.45.71.17.8.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
