2026-11-09 10:28:06
UTC ·
(4 days ago)
FortiWeb WAF: 28 attacks detected. Threat Score: 5800. Types: Client Management(14), GEO IP(14). Origin: China.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 22:30:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:29:59.142733 2026] [security2:error] [pid 13556:tid 13556] [client 45.132.187.191:44527] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:29:59.142733 2026] [security2:error] [pid 13556:tid 13556] [client 45.132.187.191:44527] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/06/22/how-we-talk-about-the-racists-among-us/"] [unique_id "aukO5wPcNZIMpmlLbviN0AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:28:46
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:28:38.471683 2026] [security2:error] [pid 8151:tid 8151] [client 45.132.187.191:43213] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:28:38.471683 2026] [security2:error] [pid 8151:tid 8151] [client 45.132.187.191:43213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mathieu.bouville.name|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mathieu.bouville.name"] [uri "/en/finance/articles/conservative-investment-stocks.html"] [unique_id "atDjFpD8anwFftUqMViGCwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 02:31:47
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:31:43.502385 2026] [security2:error] [pid 7830:tid 7844] [client 45.132.187.191:42061] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:31:43.502385 2026] [security2:error] [pid 7830:tid 7844] [client 45.132.187.191:42061] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rockabyecotons.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rockabyecotons.com"] [uri "/"] [unique_id "aqtRDxCUf817TbOlLItH5AAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-13 01:51:42
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.187.191
2026-09-13T03:02:32+02:00 vpn Access-Reject 'sistemas' station: 45.132.187.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.132.187.191
2026-09-13T03:02:32+02:00 vpn Access-Reject 'sistemas' station: 45.132.187.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 18:18:00
UTC ·
(4 months ago)
WordPress login attempt
Brute-Force
🇺🇸
kosada.com
2026-06-09 02:32:53
UTC ·
(5 months ago)
Web password guessing
Brute-Force
2026-06-08 01:13:00
UTC ·
(5 months ago)
FPROCO WEBEXPLOIT 45.132.187.191 (45.132.187.191)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 16:59:06
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:59:00.952695 2026] [security2:error] [pid 15818:tid 15818] [client 45.132.187.191:35991] ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:59:00.952695 2026] [security2:error] [pid 15818:tid 15818] [client 45.132.187.191:35991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iahksa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iahksa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiBdVIAFkcriX0BA_jsb1QAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-05-29 01:11:08
UTC ·
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-25 09:54:22
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 05:54:18.148699 2026] [security2:error] [pid 7160:tid 7160] [client 45.132.187.191:46693] M ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 05:54:18.148699 2026] [security2:error] [pid 7160:tid 7160] [client 45.132.187.191:46693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wisewerks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wisewerks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahQcSggveiEd14FFYlw_zgAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 17:09:27
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 13:09:23.529137 2026] [security2:error] [pid 6640:tid 6661] [client 45.132.187.191:18487] M ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 13:09:23.529137 2026] [security2:error] [pid 6640:tid 6661] [client 45.132.187.191:18487] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||apada.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "apada.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahMww3L6L8rAMd8e_Gs_cgAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-22 16:03:55
UTC ·
(5 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-12 23:35:25
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 19:35:21.470236 2026] [security2:error] [pid 20932:tid 20932] [client 45.132.187.191:40655] ...
show more
(mod_security) mod_security (id:225170) triggered by 45.132.187.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 19:35:21.470236 2026] [security2:error] [pid 20932:tid 20932] [client 45.132.187.191:40655] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||berklie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "berklie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agO5OU36gxm8xClm0oKB2QAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
