🇺🇸
TPI-Abuse
2026-11-09 13:18:17
UTC ·
(35 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:18:12.725862 2026] [security2:error] [pid 5222:tid 5222] [client 45.136.25.197:42369] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:18:12.725862 2026] [security2:error] [pid 5222:tid 5222] [client 45.136.25.197:42369] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/avery-assorted-neon-preprinted-removable-garage-sale-labels/"] [unique_id "avHIFMjgkGOKuqrm0IWn-wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 18:37:51
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:37:44.996823 2026] [security2:error] [pid 23023:tid 23023] [client 45.136.25.197:45787] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:37:44.996823 2026] [security2:error] [pid 23023:tid 23023] [client 45.136.25.197:45787] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ruthbalser.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ruthbalser.org"] [uri "/news/governor-baker-should-sign-these-bills-left-over-from-2018-session/"] [unique_id "avDBeCazWuInj4xdng6t5gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-07 01:27:52
UTC ·
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-03 23:01:10
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:01:03.053248 2026] [security2:error] [pid 6954:tid 6954] [client 45.136.25.197:57481] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:01:03.053248 2026] [security2:error] [pid 6954:tid 6954] [client 45.136.25.197:57481] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/jek/Beg/2007-07-09/b.html"] [unique_id "aupnrw-xtEeB1xDaUPPxEQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 15:57:40
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:57:33.962900 2026] [security2:error] [pid 25936:tid 25936] [client 45.136.25.197:40857] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:57:33.962900 2026] [security2:error] [pid 25936:tid 25936] [client 45.136.25.197:40857] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/stats/statistic108.html"] [unique_id "auoEbWsmjjYxE-EoYiMRBAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-27 18:48:02
UTC ·
(1 week ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-10-18 19:24:01
UTC ·
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-16 16:04:39
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:04:33.700422 2026] [security2:error] [pid 26784:tid 26784] [client 45.136.25.197:23881] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:04:33.700422 2026] [security2:error] [pid 26784:tid 26784] [client 45.136.25.197:23881] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gormish.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gormish.org"] [uri "/denise/the-adventures-of-lyell-canyon/"] [unique_id "atJLEYLAe_K_2Lt2FhJi0wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
conrad10781
2026-10-05 04:14:23
UTC ·
(1 month ago)
nginx-wordpress
Web App Attack
🇬🇧
relianoid.com
2026-09-04 23:19:02
UTC ·
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇫🇮
JimArchon72
2026-08-27 08:05:04
UTC ·
(2 months ago)
2026/08/27 08:04:36 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇫🇷
masterguru
2025-12-23 10:58:04
UTC ·
(10 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.136.25.197 (US/United States/-): 1 in the last 3600 secs (0-193)
Hacking
2025-12-05 08:47:49
UTC ·
(11 months ago)
IM360 WAF: Attempt to upload malware
Hacking
2025-11-20 10:59:23
UTC ·
(11 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇺🇸
fbarela
2025-11-16 19:00:24
UTC ·
(11 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
