🇺🇸
TPI-Abuse
2026-11-15 21:53:29
UTC ·
(20 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:53:26.538330 2026] [security2:error] [pid 20088:tid 20088] [client 45.133.114.99:13499] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:53:26.538330 2026] [security2:error] [pid 20088:tid 20088] [client 45.133.114.99:13499] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2020/01/28/lend-lease-20-oppression-and-resistance-in-india-jan-26-2020/"] [unique_id "avop1rQ9Vat9gqqx_poprQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 14:06:48
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:06:40.906638 2026] [security2:error] [pid 2001:tid 2001] [client 45.133.114.99:54147] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:06:40.906638 2026] [security2:error] [pid 2001:tid 2001] [client 45.133.114.99:54147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightningbug.farm|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/recipes/desserts/mayonnaise-cake/"] [unique_id "avhq8NoRWub9uZ_CrkBhwQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 12:52:31
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:52:26.993570 2026] [security2:error] [pid 1922:tid 1922] [client 45.133.114.99:40865] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:52:26.993570 2026] [security2:error] [pid 1922:tid 1922] [client 45.133.114.99:40865] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||instituteofscience.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "instituteofscience.com"] [uri "/hemo.html"] [unique_id "avhZivYc2zynEcuGo8LHGgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 14:51:12
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:51:07.134887 2026] [security2:error] [pid 19436:tid 19436] [client 45.133.114.99:24925] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:51:07.134887 2026] [security2:error] [pid 19436:tid 19436] [client 45.133.114.99:24925] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.goldenvalley1.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.goldenvalley1.com"] [uri "/projects/retail/red-maple-village/"] [unique_id "avcj271M9meLdMwKQUeR7gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 09:58:56
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 04:58:52.925218 2026] [security2:error] [pid 6808:tid 6808] [client 45.133.114.99:27271] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 04:58:52.925218 2026] [security2:error] [pid 6808:tid 6808] [client 45.133.114.99:27271] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||frightlibrary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "frightlibrary.org"] [uri "/lib/mcrowd.htm"] [unique_id "avWN3Hz_vjIYouV62gfQMwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:37:58
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:37:54.413416 2026] [security2:error] [pid 23444:tid 23444] [client 45.133.114.99:13027] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:37:54.413416 2026] [security2:error] [pid 23444:tid 23444] [client 45.133.114.99:13027] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.naturephotographyadventures.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.naturephotographyadventures.com"] [uri "/blog/2015/03/18/tanzania-photography-safari-6/"] [unique_id "avLX4inrg5dUjoVWbSPNoAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:41:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:41:11.728438 2026] [security2:error] [pid 23301:tid 23301] [client 45.133.114.99:36959] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:41:11.728438 2026] [security2:error] [pid 23301:tid 23301] [client 45.133.114.99:36959] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/05/22/further-adventures-in-egyptian-pseudo-secularism/"] [unique_id "avCYFxz4tJAVXbjZU2ANTAAAAHc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:08:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:08:38.611717 2026] [security2:error] [pid 28591:tid 28602] [client 45.133.114.99:25425] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:08:38.611717 2026] [security2:error] [pid 28591:tid 28602] [client 45.133.114.99:25425] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.linfoulk.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.linfoulk.org"] [uri "/about.html"] [unique_id "aulCJvVckv98ECTBxYTpGQAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 11:12:32
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:12:26.244884 2026] [security2:error] [pid 7078:tid 7078] [client 45.133.114.99:55779] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:12:26.244884 2026] [security2:error] [pid 7078:tid 7078] [client 45.133.114.99:55779] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.directoryofdrugs.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.directoryofdrugs.com"] [uri "/byetta.htm"] [unique_id "auR7muj5TbNGb1BIlsKESgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 08:11:52
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:11:44.444600 2026] [security2:error] [pid 24660:tid 24660] [client 45.133.114.99:45065] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:11:44.444600 2026] [security2:error] [pid 24660:tid 24660] [client 45.133.114.99:45065] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||franklincountyquilters.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "franklincountyquilters.org"] [uri "/fcqgshowntell0623/target38.html"] [unique_id "auRRQF5hdorM5Jlql_Oa2gAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 03:40:18
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:40:11.480092 2026] [security2:error] [pid 7568:tid 7568] [client 45.133.114.99:23247] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:40:11.480092 2026] [security2:error] [pid 7568:tid 7568] [client 45.133.114.99:23247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.markgiffin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.markgiffin.com"] [uri "/blog/comments/feed/"] [unique_id "auFum2jOg0v_-RYeUFK-vwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 20:22:16
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:22:08.782940 2026] [security2:error] [pid 31820:tid 31958] [client 45.133.114.99:9871] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:22:08.782940 2026] [security2:error] [pid 31820:tid 31958] [client 45.133.114.99:9871] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onenessrecords.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onenessrecords.com"] [uri "/"] [unique_id "at0TcHlgVM-lYLHRoE0nxAAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-10-23 10:53:01
UTC ·
(3 weeks ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -70.035 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa
Web App Attack
Bad Web Bot
🇵🇱
sefinek.net
2026-09-04 06:50:05
UTC ·
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from SE.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /d/bigdump.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 • Generated by: ...
show more
Triggered Cloudflare WAF (firewallCustom) from SE.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /d/bigdump.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TRoden
2026-03-31 10:09:07
UTC ·
(7 months ago)
Geo Block Plugin: Escalation flag(s): rce_attempt
Hacking
