🇺🇸
TPI-Abuse
2026-11-15 12:15:57
UTC ·
(9 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:15:42.967605 2026] [security2:error] [pid 2479:tid 2479] [client 45.135.3.187:44833] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:15:42.967605 2026] [security2:error] [pid 2479:tid 2479] [client 45.135.3.187:44833] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/new-england/"] [unique_id "avmibo9PX-smjbLNyPLbbAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:40:32
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:40:19.239160 2026] [security2:error] [pid 14912:tid 14912] [client 45.135.3.187:21145] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:40:19.239160 2026] [security2:error] [pid 14912:tid 14912] [client 45.135.3.187:21145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/reviews/the-jimi-hendrix-experience-miami-pop-festival/"] [unique_id "avRwQ30Nlx6gxG345DvxJgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 04:23:27
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:23:09.786754 2026] [security2:error] [pid 27690:tid 27690] [client 45.135.3.187:36873] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:23:09.786754 2026] [security2:error] [pid 27690:tid 27690] [client 45.135.3.187:36873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bkspeck.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bkspeck.com"] [uri "/lineage/d0000/g0000045.html"] [unique_id "avPtrcAIf6PjIdb5GEHXBgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 18:07:00
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:06:46.631915 2026] [security2:error] [pid 9113:tid 9113] [client 45.135.3.187:23359] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:06:46.631915 2026] [security2:error] [pid 9113:tid 9113] [client 45.135.3.187:23359] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightningbug.farm|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/recipes/breakfast/scotch-eggs/"] [unique_id "aujRNuH9yWRpByma8RmMCQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 04:42:50
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 00:42:34.223321 2026] [security2:error] [pid 32141:tid 32141] [client 45.135.3.187:45119] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.135.3.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 00:42:34.223321 2026] [security2:error] [pid 32141:tid 32141] [client 45.135.3.187:45119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.psychtraining.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.psychtraining.org"] [uri "/index.html"] [unique_id "at2IuixSZILPiNfhyWZqgAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-12 00:22:24
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 45.135.3.187
2026-09-12T00:55:29+02:00 vpn Access-Reject 'sslvpn' station: 45.135.3.187 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 45.135.3.187
2026-09-12T00:55:29+02:00 vpn Access-Reject 'sslvpn' station: 45.135.3.187 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-12T00:56:52+02:00 vpn Access-Reject 'admin' station: 45.135.3.187 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 01:51:18
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.135.3.187
2026-09-10T02:53:05+02:00 vpn Access-Reject '88.86.238.20' station: 45.135.3.187 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.135.3.187
2026-09-10T02:53:05+02:00 vpn Access-Reject '88.86.238.20' station: 45.135.3.187 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇪🇸
librebit
2026-06-09 13:14:17
UTC ·
(5 months ago)
RDWeb scan
Web App Attack
🇩🇪
LRob
2026-06-09 10:45:13
UTC ·
(5 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-05-26 05:21:33
UTC ·
(5 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇨🇭
backslash
2026-04-14 05:36:00
UTC ·
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-01-21 13:51:00
UTC ·
(9 months ago)
Brute force on VPN
Brute-Force
Bad Web Bot
2026-01-13 12:28:00
UTC ·
(10 months ago)
Malicious scan detected (score: 5 >= 4): Directory Traversal (Path) / Path Matches Pattern (/wp-admin/*) on path: /system/demo/GHH%20-%20PHPFM/demo/GHH%20-%20PhpSysInfo/demo/GHH%20-%20SquirrelMail/src/wp-admin/demo/GHH%20-%20PHPFM/%2e%2e%5c%2e%2e%5c% ...
show more
Malicious scan detected (score: 5 >= 4): Directory Traversal (Path) / Path Matches Pattern (/wp-admin/*) on path: /system/demo/GHH%20-%20PHPFM/demo/GHH%20-%20PhpSysInfo/demo/GHH%20-%20SquirrelMail/src/wp-admin/demo/GHH%20-%20PHPFM/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cetc/passwd
show less
Hacking
Bad Web Bot
Web App Attack
