🇺🇸
TPI-Abuse
2026-11-07 22:30:21
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 187.45.55.45 (187-45-55-45.alares.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:30:15.088777 2026] [security2:error] [pid 6818:tid 6818] [client ...
show more
(mod_security) mod_security (id:210350) triggered by 187.45.55.45 (187-45-55-45.alares.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:30:15.088777 2026] [security2:error] [pid 6818:tid 6818] [client 187.45.55.45:48358] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wailthelifeofbudpowell.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wailthelifeofbudpowell.com"] [uri "/"] [unique_id "au-md-h2GDfrBvVF9OoZ8QAAABo"], referer: https://busehuseeslimdx.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-09-09 10:57:34
UTC ·
(2 months ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-09T10:57:34Z.
Bad Web Bot
🇺🇸
kosada.com
2026-07-31 22:41:38
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇳🇱
maxxsense
2026-04-05 20:40:21
UTC ·
(7 months ago)
187.45.55.45 (BR/Brazil/-), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇨🇦
polycoda
2025-12-27 15:43:23
UTC ·
(10 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-04 07:10:28
UTC ·
(11 months ago)
(mod_security) mod_security (id:240950) triggered by 187.45.55.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 02:10:21.180246 2025] [security2:error] [pid 29872:tid 29872] [client 187.45.55.45:9937] ModS ...
show more
(mod_security) mod_security (id:240950) triggered by 187.45.55.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 02:10:21.180246 2025] [security2:error] [pid 29872:tid 29872] [client 187.45.55.45:9937] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)||beckersystems.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "beckersystems.net"] [uri "/beckerwiki/index.php"] [unique_id "aTEz3aiJCcIhZcVCi1DbTgAAAAo"], referer: http://beckersystems.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2025-11-26 07:49:14
UTC ·
(11 months ago)
[Wed Nov 26 14:20:04.540484 2025] [security2:error] [pid 1345526:tid 140674666063552] [client 187.45.55.45:9216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corerul ...
show more
[Wed Nov 26 14:20:04.540484 2025] [security2:error] [pid 1345526:tid 140674666063552] [client 187.45.55.45:9216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Brave found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/87.0.4280.88 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-all-categories/79-klimatologi/analisis-klimatologi/154-buku-informasi-peta-kekeringan-dengan-metode-standardized-precipitation-index-spi-propinsi-jawa-timur-bulan-nopember-tahun-2013 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-all-categories/79-klimatologi/analisis-klimatologi/154-buku-informasi-peta-kekeringan-dengan-metode-standar
...
show less
Hacking
Web App Attack
2025-11-26 05:26:56
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-22 17:27:26
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇳🇱
exxos
2025-07-31 02:52:40
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇩🇪
stalker.to
2025-05-23 10:58:49
UTC ·
(1 year ago)
Datacenter Proxy
Web Spam
2025-02-09 05:37:56
UTC ·
(1 year ago)
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇬🇧
Swiptly
2024-10-31 15:45:25
UTC ·
(2 years ago)
SSH brute force login attempts
...
Brute-Force
SSH
