🇺🇸
TPI-Abuse
2026-11-14 12:39:22
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:39:14.017560 2026] [security2:error] [pid 6513:tid 6513] [client 45.145.129.116:50959] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:39:14.017560 2026] [security2:error] [pid 6513:tid 6513] [client 45.145.129.116:50959] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.americanureport.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.americanureport.com"] [uri "/au-in-the-news-archives/american-university-students-try-to-guess-who-said-what-about-immigration-and-usually-get-it-wrong/"] [unique_id "avhWciSLUEtPPlQ_oi-1rQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-13 00:46:48
UTC ·
(1 day ago)
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | src_port: 13275
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-11 19:32:24
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:32:18.387538 2026] [security2:error] [pid 334:tid 334] [client 45.145.129.116:42899] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:32:18.387538 2026] [security2:error] [pid 334:tid 334] [client 45.145.129.116:42899] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/1519"] [unique_id "avTCwtAVtOdYnLITiqYMdgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 18:21:28
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:21:23.332132 2026] [security2:error] [pid 11975:tid 12123] [client 45.145.129.116:29505] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:21:23.332132 2026] [security2:error] [pid 11975:tid 12123] [client 45.145.129.116:29505] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wwwhst.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wwwhst.com"] [uri "/ieho/standards.html"] [unique_id "auOOo84U8FFqw8_hDuRzGQAAAgM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 23:14:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:14:35.279819 2026] [security2:error] [pid 22131:tid 22131] [client 45.145.129.116:51995] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:14:35.279819 2026] [security2:error] [pid 22131:tid 22131] [client 45.145.129.116:51995] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.neconebooks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.neconebooks.com"] [uri "/blog/"] [unique_id "auEwW74d37bR6_9iTDNJggAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 23:42:52
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:42:46.636286 2026] [security2:error] [pid 3365:tid 3365] [client 45.145.129.116:14849] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:42:46.636286 2026] [security2:error] [pid 3365:tid 3365] [client 45.145.129.116:14849] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/papers/paper290.html"] [unique_id "atqfdtFym0DfpNJhXSfpHwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
C C
2026-08-12 01:51:21
UTC ·
(3 months ago)
Distributed scraping attack: 1244 req from 1212 rotating proxy IPs | this IP: 1 req
Open Proxy
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-04-09 15:15:13
UTC ·
(7 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇵🇱
sefinek.net
2026-03-27 23:47:10
UTC ·
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.c ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:25
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇷🇺
sms.ru
2024-09-21 01:30:05
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇺🇸
TPI-Abuse
2024-05-12 05:59:40
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 12 01:59:32.934898 2024] [security2:error] [pid 8907] [client 45.145.129.116:30397] [client 45 ...
show more
(mod_security) mod_security (id:225170) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 12 01:59:32.934898 2024] [security2:error] [pid 8907] [client 45.145.129.116:30397] [client 45.145.129.116] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arrowheadornamentals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arrowheadornamentals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZkBaxDeqpXDBH4NFnC6tYwAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-03-10 15:46:15
UTC ·
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇿
lp
2024-02-29 20:54:25
UTC ·
(2 years ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.145.129.116
2024-02-29T18:23:52+01:00 vpn Access-Reject '[email protected] ' station: 45.145.129.116 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.145.129.116
2024-02-29T18:23:52+01:00 vpn Access-Reject '[email protected] ' station: 45.145.129.116 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2023-12-24 23:18:04
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 24 18:17:57.068777 2023] [security2:error] [pid 14513] [client 45.145.129.116:49577] [client 4 ...
show more
(mod_security) mod_security (id:210730) triggered by 45.145.129.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 24 18:17:57.068777 2023] [security2:error] [pid 14513] [client 45.145.129.116:49577] [client 45.145.129.116] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Stetson Coffee/originals/Thumbs.db"] [unique_id "ZYi8Jb4VCwLgj3XfsGkCpwAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Danbury%20II/Stetson%20Coffee/originals/
show less
Brute-Force
Bad Web Bot
Web App Attack
