🇺🇸
Zandro
2026-11-12 12:00:14
UTC ·
(2 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-11 09:37:41
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:37:38.356466 2026] [security2:error] [pid 23437:tid 23437] [client 45.140.206.210:49071] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:37:38.356466 2026] [security2:error] [pid 23437:tid 23437] [client 45.140.206.210:49071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/democracy/page/4/"] [unique_id "avQ3Yqy3g4HuYftZOusqowAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:15:10
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:15:04.549822 2026] [security2:error] [pid 5175:tid 5318] [client 45.140.206.210:43507] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:15:04.549822 2026] [security2:error] [pid 5175:tid 5318] [client 45.140.206.210:43507] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||citydentalclinic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "citydentalclinic.com"] [uri "/equipment-technology/hi-tech-equipment.html"] [unique_id "avMKyH44dit5zCVjnOkQjQAAAdY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 13:36:35
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:36:32.239589 2026] [security2:error] [pid 7454:tid 7454] [client 45.140.206.210:14701] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:36:32.239589 2026] [security2:error] [pid 7454:tid 7454] [client 45.140.206.210:14701] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cbcfargo.com"] [uri "/site/Resources/devotionals/2024-12-08.php"] [unique_id "avB64J0psyk2MkmAQ4TLdgAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 13:29:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:29:14.407498 2026] [security2:error] [pid 11651:tid 11651] [client 45.140.206.210:42133] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:29:14.407498 2026] [security2:error] [pid 11651:tid 11651] [client 45.140.206.210:42133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/03/30/the-benghazi-scandal-witchhunt-made-the-world-less-stable/"] [unique_id "auiQKjflhRlfFpi8Sp1PMAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 12:53:59
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:53:52.397140 2026] [security2:error] [pid 30045:tid 30045] [client 45.140.206.210:14197] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:53:52.397140 2026] [security2:error] [pid 30045:tid 30045] [client 45.140.206.210:14197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/wedding-invitations-delaware/"] [unique_id "auNB4PIFy9nBju6OyfpyowAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 15:21:07
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:21:02.856451 2026] [security2:error] [pid 10618:tid 10618] [client 45.140.206.210:16399] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.140.206.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:21:02.856451 2026] [security2:error] [pid 10618:tid 10618] [client 45.140.206.210:16399] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||weirdlovemakers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "weirdlovemakers.com"] [uri "/b20_razorcake.html"] [unique_id "atzM3jHIqJ562LMDRe5H9AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-13 06:21:45
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.140.206.210
2026-09-13T07:58:22+02:00 vpn Access-Reject '24-400-4-06-0109' station: 45.140.206.210 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.140.206.210
2026-09-13T07:58:22+02:00 vpn Access-Reject '24-400-4-06-0109' station: 45.140.206.210 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
4server
2026-08-27 23:39:28
UTC ·
(2 months ago)
[FriAug2801:39:26.8490682026][security2:error][pid1857225:tid1857319][client45.140.206.210:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADE ...
show more
[FriAug2801:39:26.8490682026][security2:error][pid1857225:tid1857319][client45.140.206.210:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.mgpublishing.ch\"][uri\"/wp-json/\"][unique_id\"apDKrthFMuWHJ34XBuJ_uQAAAQE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
kommunos
2026-08-25 18:56:44
UTC ·
(2 months ago)
/wp-json/
Web App Attack
🇨🇭
backslash
2026-08-25 00:57:00
UTC ·
(2 months ago)
block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0
SQL Injection
2026-07-23 03:36:37
UTC ·
(3 months ago)
Suspicious or malicious traffic has been detected
Web App Attack
🇺🇸
kosada.com
2026-07-10 14:18:31
UTC ·
(4 months ago)
Web password guessing
Brute-Force
🇧🇪
Saec
2026-07-08 10:36:03
UTC ·
(4 months ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.ovh)
Port Scan
Web App Attack
