🇺🇸
TPI-Abuse
2026-10-28 19:12:49
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:12:35.268320 2026] [security2:error] [pid 32542:tid 32542] [client 45.10.167.163:36387] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:12:35.268320 2026] [security2:error] [pid 32542:tid 32542] [client 45.10.167.163:36387] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/the-internet/"] [unique_id "auJJIy3-nChAgh8meisEhwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 18:04:14
(6 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:04:00.758828 2026] [security2:error] [pid 26039:tid 26067] [client 45.10.167.163:30761] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:04:00.758828 2026] [security2:error] [pid 26039:tid 26067] [client 45.10.167.163:30761] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.americanacademyofprojectmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.americanacademyofprojectmanagement.com"] [uri "/SriLanka.html"] [unique_id "auI5EOzlCWDiQhNEH_Kp4QAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 20:27:01
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:26:46.861049 2026] [security2:error] [pid 31820:tid 31969] [client 45.10.167.163:18493] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:26:46.861049 2026] [security2:error] [pid 31820:tid 31969] [client 45.10.167.163:18493] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.appraisalteam.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.appraisalteam.net"] [uri "/aboutus.html"] [unique_id "at0UhnlgVM-lYLHRoE0o6wAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 07:51:41
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.10.167.163
2026-09-10T08:28:59+02:00 vpn Access-Reject 'maubee' station: 45.10.167.163 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.10.167.163
2026-09-10T08:28:59+02:00 vpn Access-Reject 'maubee' station: 45.10.167.163 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 15:20:03
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-05 02:15:22
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-03 01:51:21
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
kosada.com
2026-08-28 22:44:55
(2 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-03 09:27:54
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 45.10.167.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 05:27:39.388712 2026] [security2:error] [pid 2537425:tid 2537425] [client 45.10.167.163:3892 ...
show more
(mod_security) mod_security (id:225170) triggered by 45.10.167.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 05:27:39.388712 2026] [security2:error] [pid 2537425:tid 2537425] [client 45.10.167.163:38925] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gcmmortgage.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gcmmortgage.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anBfC2USAbjCnYMSdNrcTgAAABU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
georgengelmann
2026-07-15 14:25:30
(3 months ago)
Failed login attempt for admin
Brute-Force
Web App Attack
2025-11-25 22:26:37
(11 months ago)
wordpress-trap
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-11-07 14:25:35
(11 months ago)
WP Admin Scan Activities
Web App Attack
🇨🇳
ThreatBook.io
2025-05-03 23:35:00
(1 year ago)
2025-05-03 06:55:47 /+CSCOE+/logon.html
Web App Attack
2025-04-17 10:00:00
(1 year ago)
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to log ...
show more
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user”
show less
Hacking
Brute-Force
Web App Attack
