🇺🇸
TPI-Abuse
2026-09-01 20:58:12
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:58:09.400993 2026] [security2:error] [pid 6756:tid 6756] [client 45.80.104.135:35989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||osmanhc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "osmanhc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apc8YePiAkVUrImJDdvbSAAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 04:00:43
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 00:00:36.025496 2026] [security2:error] [pid 18230:tid 18252] [client 45.80.104.135:20411] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geekshop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geekshop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao-2ZCG7lcFa2ER8Rn6acwAAANM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 18:45:16
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 14:45:09.584193 2026] [security2:error] [pid 30582:tid 30582] [client 45.80.104.135:18045] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cosentient.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cosentient.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ao80NUQdQiCIkF02qYkUEwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 15:24:29
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 11:24:21.863354 2026] [security2:error] [pid 3663:tid 3663] [client 45.80.104.135:28037] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||endemic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "endemic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoXKpf7ztx31tv1IA_av8QAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-18 23:30:06
(2 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-08-15 03:11:08
(2 weeks ago)
FPROCO WEBEXPLOIT 45.80.104.135 (45.80.104.135)
Web App Attack
🇮🇹
VHosting
2026-08-11 18:00:05
(3 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇮🇪
RoboSOC
2026-08-03 23:13:52
(4 weeks ago)
WordPress Core author exclude SQL Injection Vulnerability, PTR: PTR record not found
Hacking
🇱🇻
garmtech.com
2026-07-31 01:00:09
(1 month ago)
IM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:0
Hacking
🇫🇷
dynamix
2026-07-30 10:43:12
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 14:42:29
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:42:24.990092 2026] [security2:error] [pid 1563252:tid 1563252] [client 45.80.104.135:36921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mosherpit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mosherpit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amduUPlKxyYWEbgH3gtiqwAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-26 16:58:21
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 07:23:21
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 03:23:14.141851 2026] [security2:error] [pid 2561834:tid 2561912] [client 45.80.104.135:42229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||richardleeweatherman.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "richardleeweatherman.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amHBYnDLr8NLUl1s3mKHcQAAAZI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-17 12:31:44
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇪🇸
librebit
2026-07-16 14:56:38
(1 month ago)
Brute force
Brute-Force