🇺🇸
TPI-Abuse
2026-11-06 02:42:52
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:42:38.846849 2026] [security2:error] [pid 4183648:tid 4183673] [client 45.10.167.92:19379] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:42:38.846849 2026] [security2:error] [pid 4183648:tid 4183673] [client 45.10.167.92:19379] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.americanacademyofprojectmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.americanacademyofprojectmanagement.com"] [uri "/Top-Project-Management-Certifications-PM-Qualifications.html"] [unique_id "au0-nilXwIlBN8yYcmtLEAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 03:36:58
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:36:40.597093 2026] [security2:error] [pid 4119:tid 4119] [client 45.10.167.92:17221] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:36:40.597093 2026] [security2:error] [pid 4119:tid 4119] [client 45.10.167.92:17221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2022/02/06/feb-6-1922-the-washington-naval-treaty-arsenal-for-democracy-ep-411/"] [unique_id "auv5yB9qCVdDidPMSITkGwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 19:32:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:32:03.786878 2026] [security2:error] [pid 30924:tid 30924] [client 45.10.167.92:56051] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:32:03.786878 2026] [security2:error] [pid 30924:tid 30924] [client 45.10.167.92:56051] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||virginians.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "virginians.com"] [uri "/topics/_indexl.htm"] [unique_id "aueTs2tFG-93SpJXfWcY7QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 06:17:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:17:38.817355 2026] [security2:error] [pid 14040:tid 14040] [client 45.10.167.92:47753] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:17:38.817355 2026] [security2:error] [pid 14040:tid 14040] [client 45.10.167.92:47753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fiasdesigns.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fiasdesigns.com"] [uri "/author/admin/page/3/"] [unique_id "auQ2gsch_0dbdkrLedbxUAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 02:47:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:47:42.561408 2026] [security2:error] [pid 25736:tid 25736] [client 45.10.167.92:42579] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:47:42.561408 2026] [security2:error] [pid 25736:tid 25736] [client 45.10.167.92:42579] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/author/rachel/page/3/"] [unique_id "auQFTp-Rm-RtgDjPD0sjGgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 03:54:36
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:54:23.798020 2026] [security2:error] [pid 15727:tid 15727] [client 45.10.167.92:55735] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:54:23.798020 2026] [security2:error] [pid 15727:tid 15727] [client 45.10.167.92:55735] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.getlawforms.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.getlawforms.com"] [uri "/application-for-reservation-of-corporate-name.htm"] [unique_id "auFx781eYNpMN5f_u3-FFwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 23:42:52
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:42:38.488925 2026] [security2:error] [pid 7125:tid 7125] [client 45.10.167.92:62515] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.10.167.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:42:38.488925 2026] [security2:error] [pid 7125:tid 7125] [client 45.10.167.92:62515] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kristinmoore.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kristinmoore.com"] [uri "/pages/custom.html"] [unique_id "atqfbgVUgRmIL7gGZ95oHgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
mind5t0rm
2026-01-25 12:22:04
UTC ·
(9 months ago)
(WPLOGIN) WP Login Attack 45.10.167.92 (RU/Russia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.10.167.92 - - [25/Jan/2026:19:21:53 +0700] "GET /wp-login.php HTTP/2.0" 200 2452 "-" "Mozilla/5.0 (Windows NT 10. ...
show more
(WPLOGIN) WP Login Attack 45.10.167.92 (RU/Russia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.10.167.92 - - [25/Jan/2026:19:21:53 +0700] "GET /wp-login.php HTTP/2.0" 200 2452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
45.10.167.92 - - [25/Jan/2026:19:21:55 +0700] "GET /wp-login.php?wp_lang=en_US HTTP/2.0" 200 2452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
45.10.167.92 - - [25/Jan/2026:19:21:57 +0700] "POST /wp-login.php?wp_lang=en_US HTTP/2.0" 302 0 "https://zerowaterthailand.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
show less
Port Scan
2026-01-24 21:09:35
UTC ·
(9 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2026-01-23 17:51:21
UTC ·
(9 months ago)
wordpress-trap
Web App Attack
🇳🇱
i-turnradio.nl
2026-01-23 16:16:38
UTC ·
(9 months ago)
2026-01-23 17:16:38 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
🇺🇸
mind5t0rm
2026-01-21 21:17:20
UTC ·
(9 months ago)
(WPLOGIN) WP Login Attack 45.10.167.92 (RU/Russia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.10.167.92 - - [22/Jan/2026:04:17:03 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Macintosh; Int ...
show more
(WPLOGIN) WP Login Attack 45.10.167.92 (RU/Russia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.10.167.92 - - [22/Jan/2026:04:17:03 +0700] "GET /wp-login.php HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
45.10.167.92 - - [22/Jan/2026:04:17:07 +0700] "GET /wp-login.php?wp_lang=en_US HTTP/1.1" 200 2466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
45.10.167.92 - - [22/Jan/2026:04:17:12 +0700] "POST /wp-login.php?wp_lang=en_US HTTP/1.1" 302 0 "https://zerowaterthailand.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
show less
Port Scan
🇫🇷
masterguru
2025-12-11 05:04:04
UTC ·
(10 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.10.167.92 (CA/Canada/-): 1 in the last 3600 secs (0-196)
Hacking
2025-04-17 10:00:00
UTC ·
(1 year ago)
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to log ...
show more
“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user”
show less
Hacking
Brute-Force
Web App Attack
