|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.80.104.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.104.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 22:15:01.555772 2026] [security2:error] [pid 32062:tid 32062] [client 45.80.104.52:58757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rdhtrucking.com"] [uri "/wp-config.php.swp"] [unique_id "aioaJdxTiRMZk8TxRDk8TQAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
kosada.com
|
|
Web password guessing
|
Brute-Force
|
|
|
🇫🇷
tilellit.pro
|
|
Fail2Ban banned 45.80.104.52 for security violations in jail wp-armour. Log: 2026/05/05 18:55:12 [er ...
show more
Fail2Ban banned 45.80.104.52 for security violations in jail wp-armour. Log: 2026/05/05 18:55:12 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.80.104.52 | Target: wplogin" , client: 45.80.104.52, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
|
Web Spam
|
|
|
🇩🇪
kjaerulff
|
|
Failed Wordpress login using wp-login.php
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.80.104.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 07:19:07.253718 2026] [security2:error] [pid 11980:tid 11980] [client 45.80.104.52:12129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcgmcg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcgmcg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ackKqzcMjaUytO9CBChyEwAAAA8"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.80.104.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:59:46.907536 2026] [security2:error] [pid 7658:tid 7658] [client 45.80.104.52:51513] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coroneta.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coroneta.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab3tgqR4WiMXZEu_fnjIPwAAACA"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.80.104.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.104.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 16:15:41.689494 2026] [security2:error] [pid 1084:tid 1084] [client 45.80.104.52:56435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vandromme.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vandromme.net"] [uri "/wp-json/wp/v2/users"] [unique_id "abm2bbjSHd4m-AqLxpjvuQAAAAc"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇦🇺
screwlooseit.com.au
|
|
Blocked by CSF 13 firewall - Rule: WPLOGIN
GB/United Kingdom/-
|
Web App Attack
|
|
|
🇩🇪
kjaerulff
|
|
Failed Wordpress login using wp-login.php
|
Web App Attack
|
|
|
🇦🇺
oncord
|
|
Form spam
|
Web Spam
|
|
|
🇺🇸
agenciahypelab.com.br
|
|
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
|
Brute-Force
SSH
|
|
|
🇩🇪
SCHAPPY
|
|
Wordpress attack: user enumeration attempt detected.
|
Web App Attack
|
|
|
Anonymous
|
|
Ports: *; Direction: 0; Trigger: CT_LIMIT
|
Brute-Force
SSH
|
|
|
🇧🇷
hostseries
|
|
Brute-force cPanel Services
|
Brute-Force
|
|
|
🇨🇳
ThreatBook.io
|
|
2025-04-11 07:05:55 /+CSCOE+/logon.html
|
Web App Attack
|
|