🇺🇸
TPI-Abuse
2026-11-14 17:25:44
UTC ·
(17 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:25:27.334922 2026] [security2:error] [pid 11471:tid 11471] [client 45.10.167.134:37385] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:25:27.334922 2026] [security2:error] [pid 11471:tid 11471] [client 45.10.167.134:37385] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2013/04/brandi-chastain-bikini-pictures/"] [unique_id "aviZh9lAWOtCk42Jp8F_aAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 15:49:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 10:49:01.263447 2026] [security2:error] [pid 22385:tid 22385] [client 45.10.167.134:49973] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 10:49:01.263447 2026] [security2:error] [pid 22385:tid 22385] [client 45.10.167.134:49973] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/author/greg/"] [unique_id "auylbRbz7fmWRncgCNA7cQAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:20:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:20:04.361075 2026] [security2:error] [pid 30383:tid 30428] [client 45.10.167.134:39551] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:20:04.361075 2026] [security2:error] [pid 30383:tid 30428] [client 45.10.167.134:39551] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||businesscertification.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "businesscertification.org"] [uri "/Management-Consultant-Handbook-105.html"] [unique_id "auJK5KTV__kG4xYJnztCzAAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ddw
2026-10-15 13:03:55
UTC ·
(4 weeks ago)
Access Violation Attempts - Multiple 403 Forbidden responses.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 00:55:32
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 45.10.167.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:55:13.482591 2026] [security2:error] [pid 575:tid 575] [client 45.10.167.134:55229] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 45.10.167.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:55:13.482591 2026] [security2:error] [pid 575:tid 575] [client 45.10.167.134:55229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||varnadorefamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "varnadorefamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abya8RQHWW1vuFQURa41UwAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-27 12:24:20
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-04-17 10:00:00
UTC ·
(1 year ago)
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to log ...
show more
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user”
show less
Hacking
Brute-Force
Web App Attack
2025-04-17 10:00:00
UTC ·
(1 year ago)
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to log ...
show more
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user “
show less
Hacking
Brute-Force
Web App Attack
2025-03-12 08:17:55
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-09-02 04:52:01
UTC ·
(2 years ago)
Domain : 1000rosas.pt
Rule : xmlrpc
2024-09-02 04:50:44 38.242.219.191 POST /xmlrpc.php - 443 - 45.10.167.134 HTTP/1.1 Apache-HttpClient/4.5.13 (Java/11.0.23) - www.1000rosas.pt 404 0 2 3951 364 145 - -
Web App Attack
