🇺🇸
TPI-Abuse
2026-10-26 20:54:16
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:54:11.511025 2026] [security2:error] [pid 27089:tid 27187] [client 45.136.26.48:51921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntma1160.htm"] [unique_id "at-988CKifbFeMbZGeIymAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 15:36:17
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:36:14.046918 2026] [security2:error] [pid 23272:tid 23272] [client 45.136.26.48:49987] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.byles.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.byles.net"] [uri "/ink-review/2020-12-12-ink-overview-sailor-manyo-series-i-part-1/"] [unique_id "atzQbu8-DfEdO0YpVP59zgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 02:29:03
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 22:28:56.824648 2026] [security2:error] [pid 10428:tid 10428] [client 45.136.26.48:21683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cchockeyhistory.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cchockeyhistory.org"] [uri "/SooCanadaIHLteams.htm"] [unique_id "atwX6LVxn6V5udPj-_qY3QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 20:27:36
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:27:29.451207 2026] [security2:error] [pid 30422:tid 30422] [client 45.136.26.48:61463] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nnrentacar.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nnrentacar.com"] [uri "/topic-details.php"] [unique_id "atfOsXF5OORClONK2RdfJgAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-10-05 11:04:45
(3 weeks ago)
45.136.26.48 - - [05/Oct/2026:13:04:44 +0200] "GET /admin HTTP/1.1" 302 5034 "https://www.google.com ...
show more
45.136.26.48 - - [05/Oct/2026:13:04:44 +0200] "GET /admin HTTP/1.1" 302 5034 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-03 15:32:07
(3 weeks ago)
ASWEEDCO WEBEXPLOIT 45.136.26.48 (45.136.26.48)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 23:39:41
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:39:36.385338 2026] [security2:error] [pid 21997:tid 21997] [client 45.136.26.48:51697] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||neconebooks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "neconebooks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akhIOG-HiZ5P3xbqZJxzeAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-06-22 04:58:30
(4 months ago)
(mod_security) mod_security (id:900177) triggered by 45.136.26.48 (US/United States/-): 5 in the las ...
show more
(mod_security) mod_security (id:900177) triggered by 45.136.26.48 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
🇬🇧
Oakley
2026-06-12 06:59:06
(4 months ago)
(mod_security) mod_security (id:900177) triggered by 45.136.26.48 (US/United States/-): 5 in the las ...
show more
(mod_security) mod_security (id:900177) triggered by 45.136.26.48 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-05-22 13:28:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 09:28:07.637404 2026] [security2:error] [pid 11595:tid 11595] [client 45.136.26.48:41083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iee-usa.com"] [uri "/wp-config.php.dist"] [unique_id "ahBZ50QHhaN7DWcxGCTE8AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 18:53:27
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.136.26.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:53:22.521591 2026] [security2:error] [pid 5426:tid 5521] [client 45.136.26.48:10341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.east-lease.fibertechsystems.com"] [uri "/wp-config.php.dist"] [unique_id "ag4DItgl061utoxsLOMrxAAAAgU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
antlac1
2026-05-17 12:05:18
(5 months ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
2026-05-04 08:11:41
(5 months ago)
45.136.26.48 - - [04/May/2026:16:11:40 +0800] "GET /wp-content/uploads/.htaccess HTTP/1.1" 403 199 " ...
show more
45.136.26.48 - - [04/May/2026:16:11:40 +0800] "GET /wp-content/uploads/.htaccess HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-04-16 18:24:18
(6 months ago)
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operato ...
show more
COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. (225170-123)
show less
Hacking
Web App Attack
🇺🇸
Matthew Ping
2026-04-15 03:15:01
(6 months ago)
ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
