🇺🇸
TPI-Abuse
2026-11-13 08:12:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:12:32.493252 2026] [security2:error] [pid 15610:tid 15610] [client 45.135.1.106:41499] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:12:32.493252 2026] [security2:error] [pid 15610:tid 15610] [client 45.135.1.106:41499] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windisfun.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windisfun.com"] [uri "/sailinginstructions03.html"] [unique_id "avbGcLmy6loDdQA9PHDCOgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 16:52:53
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:52:37.673972 2026] [security2:error] [pid 24421:tid 24436] [client 45.135.1.106:38797] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:52:37.673972 2026] [security2:error] [pid 24421:tid 24436] [client 45.135.1.106:38797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/naleusr2419979"] [unique_id "avSdVaelOjIrG90ZXscVkAAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:13:13
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:12:58.011279 2026] [security2:error] [pid 7363:tid 7363] [client 45.135.1.106:32411] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:12:58.011279 2026] [security2:error] [pid 7363:tid 7363] [client 45.135.1.106:32411] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||forum.whodatnation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "forum.whodatnation.com"] [uri "/showthread.php"] [unique_id "avLSCmF9BAnsX6DhR26-eQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:07:58
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:07:44.466176 2026] [security2:error] [pid 30590:tid 30590] [client 45.135.1.106:10341] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:07:44.466176 2026] [security2:error] [pid 30590:tid 30590] [client 45.135.1.106:10341] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/with-the-heat-my-only-goal-was-to-finish-with-a-smile-on-my-face-abbey-goetz-vanvalkenburg-april-16-2012/"] [unique_id "auWv4DzJ3unEOGoYOoEFiAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-10-30 13:00:14
UTC ·
(2 weeks ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-10-29 12:54:54
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:54:37.882080 2026] [security2:error] [pid 21595:tid 21595] [client 45.135.1.106:55393] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:54:37.882080 2026] [security2:error] [pid 21595:tid 21595] [client 45.135.1.106:55393] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mosherpit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mosherpit.com"] [uri "/2010/04/"] [unique_id "auNCDe_4bx5FHOFOrLzKOgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 03:43:47
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 23:43:34.778136 2026] [security2:error] [pid 26852:tid 26852] [client 45.135.1.106:47869] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.1.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 23:43:34.778136 2026] [security2:error] [pid 26852:tid 26852] [client 45.135.1.106:47869] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.scoutinsignia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.scoutinsignia.com"] [uri "/pros.htm"] [unique_id "auLA5sc-YU6tvH1aEw00qgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇭
4server
2026-09-10 00:23:04
UTC ·
(2 months ago)
[ThuSep1002:22:59.4620022026][security2:error][pid134058:tid134991][client45.135.1.106:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960 ...
show more
[ThuSep1002:22:59.4620022026][security2:error][pid134058:tid134991][client45.135.1.106:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"leonitraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"aqH4Ywvfm3gAR1oV2MrEcAAAAQ8\"]
show less
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 01:10:01
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-08 17:06:09
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇫🇮
bittiguru.fi
2026-09-07 07:11:44
UTC ·
(2 months ago)
45.135.1.106 - [07/Sep/2026:10:07:19 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "4.67"
45.135.1.106 - [07/Sep/2026:10:11:44 +0300] "POST /xmlrpc.php HTTP/2.0" 40 ...
show more
45.135.1.106 - [07/Sep/2026:10:07:19 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "4.67"
45.135.1.106 - [07/Sep/2026:10:11:44 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "4.67"
...
show less
Hacking
Brute-Force
Web App Attack
🇸🇰
KZP
2026-07-21 03:00:20
UTC ·
(3 months ago)
Automatic report from KZP firewall log.
Port Scan
Hacking
Brute-Force
🇪🇸
librebit
2026-07-11 09:56:26
UTC ·
(4 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-07-09 16:33:12
UTC ·
(4 months ago)
Brute force
Brute-Force
