🇺🇸
TPI-Abuse
2026-05-06 16:02:14
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.80.105.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.105.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 12:02:10.887032 2026] [security2:error] [pid 20904:tid 20904] [client 45.80.105.94:30287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||i-med.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "i-med.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aftmAl6lbsFncpMFv0ERMwAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 02:26:07
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 45.80.105.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.105.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 22:26:01.975724 2026] [security2:error] [pid 5484:tid 5484] [client 45.80.105.94:44249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eurocs2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eurocs2.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afAauQrVl0p2NnppvNOJwgAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-04-21 02:48:48
(1 month ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇦🇺
MAGIC
2026-04-21 01:23:04
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
nationaleventpros.com
2026-04-17 10:49:16
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
mind5t0rm
2026-04-13 21:19:59
(1 month ago)
(WPLOGIN) WP Login Attack 45.80.105.94 (IL/Israel/-): 3 in the last 3600 secs; Ports: *; Direction: ...
show more
(WPLOGIN) WP Login Attack 45.80.105.94 (IL/Israel/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.80.105.94 - - [14/Apr/2026:04:17:57 +0700] "GET /wp-login.php HTTP/2.0" 200 2347 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.80.105.94 - - [14/Apr/2026:04:18:00 +0700] "POST /wp-login.php HTTP/2.0" 200 2498 "https://convercon.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.80.105.94 - - [14/Apr/2026:04:19:55 +0700] "GET /wp-login.php HTTP/2.0" 200 2347 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Port Scan
🇺🇸
TPI-Abuse
2025-08-30 08:57:21
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 45.80.105.94 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.80.105.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 04:57:15.112993 2025] [security2:error] [pid 9455:tid 9455] [client 45.80.105.94:54959] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ik3co.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ik3co.com"] [uri "/mailto:[email protected] "] [unique_id "aLK86xy2p3GR0jWytAmWKgAAABI"], referer: http://ik3co.com/contact.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oncord
2025-08-29 04:13:09
(9 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-08-22 14:54:12
(9 months ago)
Form spam
Web Spam
🇺🇸
oncord
2025-08-19 22:12:29
(9 months ago)
Form spam
Web Spam
🇳🇱
exxos
2025-08-02 17:11:42
(10 months ago)
HTTP1.x attacks
DDoS Attack
🇬🇧
Nucuta
2025-07-19 03:46:28
(10 months ago)
2025-07-19 03:46:28 UTC | Хронометры Rolex Sub | fgdsfgdss99@hotmail. | https://rolex-submariner-sho ...
show more
2025-07-19 03:46:28 UTC | Хронометры Rolex Sub | fgdsfgdss99@hotmail. | https://rolex-submariner-shop.ru | 45.80.105.94 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 | Rolex Submariner, выпущенная в 1954 году стала первой дайверской моделью, выдерживающими глубину до 330 футов.
Модель имеет 60-минутную шкалу, Oyster-корпус , обеспечивающие герметичность даже в экстремальных условиях.
Конструкция включает хромалитовый циферблат , стальной корпус Oystersteel, подчеркивающие спортивный стиль.
<a href=\"https://rolex-submariner-shop.ru\" rel=\"nofollow ugc\">Хронометры Ролекс Субмаринер отзывы</a>
Механизм с запасом хода до | comment
show less
Blog Spam
🇨🇿
lp
2025-03-20 16:26:39
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.105.94
2025-03-20T16:13:55+01:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.105.94
2025-03-20T16:13:55+01:00 vpn Access-Reject 'lemuel' station: 45.80.105.94 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-03-17 01:24:27
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.105.94
2025-03-17T01:28:53+01:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.105.94
2025-03-17T01:28:53+01:00 vpn Access-Reject 'jereco' station: 45.80.105.94 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-03-15 04:23:41
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 45.80.105.94
2025-03-15T03:47:23+01:0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 45.80.105.94
2025-03-15T03:47:23+01:00 vpn Access-Reject 'sloppy' station: 45.80.105.94 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-15T03:50:56+01:00 vpn Access-Reject 'delboy' station: 45.80.105.94 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack