🇺🇸
TPI-Abuse
2026-11-13 08:07:41
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:07:26.497075 2026] [security2:error] [pid 1289:tid 1289] [client 185.81.145.150:54965] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:07:26.497075 2026] [security2:error] [pid 1289:tid 1289] [client 185.81.145.150:54965] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/2016/04/21/"] [unique_id "avbFPmSdkny--sl9Poj7RgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:19:21
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:19:06.104747 2026] [security2:error] [pid 25599:tid 25599] [client 185.81.145.150:44051] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:19:06.104747 2026] [security2:error] [pid 25599:tid 25599] [client 185.81.145.150:44051] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2009/04/25/if-he-can-walk-and-chew-gum/"] [unique_id "au-j2l9OIoVIrbBbk9wuXQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 08:06:02
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:05:47.892426 2026] [security2:error] [pid 19805:tid 19805] [client 185.81.145.150:34943] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:05:47.892426 2026] [security2:error] [pid 19805:tid 19805] [client 185.81.145.150:34943] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/chest/increase-bench-press.html"] [unique_id "aumV23slmEE_3EEBLAP3VwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 01:49:05
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:48:52.231456 2026] [security2:error] [pid 4237:tid 4237] [client 185.81.145.150:27653] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:48:52.231456 2026] [security2:error] [pid 4237:tid 4237] [client 185.81.145.150:27653] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bdalzell.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bdalzell.batw.net"] [uri "/lure/hot.weather.coursing.html"] [unique_id "auFUhN33SiJrkRrLhxtZzwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 22:01:57
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:01:43.752639 2026] [security2:error] [pid 5638:tid 5638] [client 185.81.145.150:38845] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.81.145.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:01:43.752639 2026] [security2:error] [pid 5638:tid 5638] [client 185.81.145.150:38845] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aaabft.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aaabft.com"] [uri "/aboutus.html"] [unique_id "auEfR--csAUeCXsmB54WZQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-24 07:40:41
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇩🇪
FD-IX
2026-08-19 14:10:01
UTC ·
(2 months ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
🇺🇸
mind5t0rm
2026-01-26 08:13:04
UTC ·
(9 months ago)
(WPLOGIN) WP Login Attack 185.81.145.150 (RU/Russia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 185.81.145.150 - - [26/Jan/2026:15:12:46 +0700] "GET /wp-login.php HTTP/2.0" 200 2453 "-" "Mozilla/5.0 (Windows NT ...
show more
(WPLOGIN) WP Login Attack 185.81.145.150 (RU/Russia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 185.81.145.150 - - [26/Jan/2026:15:12:46 +0700] "GET /wp-login.php HTTP/2.0" 200 2453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
185.81.145.150 - - [26/Jan/2026:15:12:50 +0700] "GET /wp-login.php?wp_lang=en_US HTTP/2.0" 200 2453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
185.81.145.150 - - [26/Jan/2026:15:12:53 +0700] "POST /wp-login.php?wp_lang=en_US HTTP/2.0" 302 0 "https://zerowaterthailand.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
show less
Port Scan
🇮🇩
BPS-StatisticsIndonesia
2025-02-10 13:36:43
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-02-02 23:57:36
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-01-28 13:34:36
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
2025-01-19 03:52:42
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-01-16 20:31:31
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
🇦🇺
MAGIC
2025-01-03 08:04:01
UTC ·
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇩
BPS-StatisticsIndonesia
2025-01-02 02:05:14
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
