🇺🇸
TPI-Abuse
2026-11-10 08:52:19
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:52:12.569588 2026] [security2:error] [pid 8566:tid 8566] [client 45.136.25.210:24149] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:52:12.569588 2026] [security2:error] [pid 8566:tid 8566] [client 45.136.25.210:24149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/instrumental/021b07961a0ad85c6.html"] [unique_id "avLbPC15qwFUF8P8rdKt1AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:17:04
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:16:55.516160 2026] [security2:error] [pid 8354:tid 8354] [client 45.136.25.210:24273] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:16:55.516160 2026] [security2:error] [pid 8354:tid 8354] [client 45.136.25.210:24273] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||advancedmotorsports.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "advancedmotorsports.com"] [uri "/product/2013-ducati-multistrada-st/"] [unique_id "avJwh6RmtbsNeYu2fSa7BQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:13:59
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:13:51.650289 2026] [security2:error] [pid 3848:tid 3848] [client 45.136.25.210:34293] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:13:51.650289 2026] [security2:error] [pid 3848:tid 3848] [client 45.136.25.210:34293] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Garber, Shirley Karsner obit 1920-2011.htm"] [unique_id "avEeT_PDXs8CIijbWYblfAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:28:48
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:28:42.527973 2026] [security2:error] [pid 2393621:tid 2393639] [client 45.136.25.210:2103 ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:28:42.527973 2026] [security2:error] [pid 2393621:tid 2393639] [client 45.136.25.210:21037] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||baronlongford.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "baronlongford.com"] [uri "/Carnival-Mardi-Gras.html"] [unique_id "au-mGrRMV-8Cy0YJYW1CTgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 00:17:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:17:10.657433 2026] [security2:error] [pid 16658:tid 16658] [client 45.136.25.210:22421] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.25.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:17:10.657433 2026] [security2:error] [pid 16658:tid 16658] [client 45.136.25.210:22421] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/loose-nukes/"] [unique_id "au0chkXsiBGRdrtloxn7tQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-06 23:26:40
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
2026-09-25 11:29:48
UTC ·
(1 month ago)
2026-09-25T13:29:48.172609+02:00 polaris wp(sahpa.co.za)[2259294]: Blocked authentication attempt for
[email protected] from 45.136.25.210
...
Brute-Force
Web App Attack
2026-05-13 12:50:10
UTC ·
(5 months ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
🇩🇪
MusicLibrary
2026-02-10 09:06:41
UTC ·
(9 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇧🇪
voormedia
2026-02-09 05:09:19
UTC ·
(9 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
2026-01-29 18:47:18
UTC ·
(9 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.29 is noted in report timestamp
Hacking
Brute-Force
2026-01-17 23:14:56
UTC ·
(9 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.17 is noted in report timestamp
Hacking
Brute-Force
🇮🇩
BPS-StatisticsIndonesia
2026-01-07 20:54:24
UTC ·
(10 months ago)
XML RPC Scan Activities
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-01-02 01:09:25
UTC ·
(10 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.136.25.210 (US/United States/-): 1 in the last 3600 secs
Web App Attack
🇫🇷
masterguru
2025-12-23 11:07:34
UTC ·
(10 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.136.25.210 (US/United States/-): 1 in the last 3600 secs (0-197)
Hacking
