🇺🇸
TPI-Abuse
2026-11-10 04:36:55
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:36:50.060500 2026] [security2:error] [pid 1082:tid 1082] [client 45.145.130.114:40387] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:36:50.060500 2026] [security2:error] [pid 1082:tid 1082] [client 45.145.130.114:40387] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jamesmsmall.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jamesmsmall.com"] [uri "/blog/memory/memory-tip-draw-a-picture-to-remember/"] [unique_id "avKfYmbnG-Cp6zIjGHMhzQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:07:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:07:42.315165 2026] [security2:error] [pid 22201:tid 22201] [client 45.145.130.114:10941] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:07:42.315165 2026] [security2:error] [pid 22201:tid 22201] [client 45.145.130.114:10941] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.perthdps.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.perthdps.com"] [uri "/convicts/con-wa12.html"] [unique_id "avE4_oL1jbdQCPyEBXGzQgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-02 23:02:37
UTC ·
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-01.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-30 15:20:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 11:20:20.735479 2026] [security2:error] [pid 14545:tid 14545] [client 45.145.130.114:43953] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 11:20:20.735479 2026] [security2:error] [pid 14545:tid 14545] [client 45.145.130.114:43953] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/recstore/m/MytheMoyar.html"] [unique_id "auS1tOWXISnSTG6YBhVRDQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:19:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:19:35.654735 2026] [security2:error] [pid 30109:tid 30109] [client 45.145.130.114:13751] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:19:35.654735 2026] [security2:error] [pid 30109:tid 30109] [client 45.145.130.114:13751] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||radtraininginc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "radtraininginc.com"] [uri "/index.php/photo-gallery/patrol-tactics-beaumont-tx"] [unique_id "auNyF4-2sWpFxv7Jldh-DQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-27 19:18:02
UTC ·
(2 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-24 12:18:21
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:18:17.622988 2026] [security2:error] [pid 1681:tid 1681] [client 45.145.130.114:29887] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:18:17.622988 2026] [security2:error] [pid 1681:tid 1681] [client 45.145.130.114:29887] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.riser-astrology.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.riser-astrology.com"] [uri "/blog/astrology-august-2019/"] [unique_id "atyiCSzYlonI6Bs5MHlMuAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-18 18:29:57
UTC ·
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
Packets-Decreaser.NET
2025-11-17 16:50:45
UTC ·
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-02-25 17:03:42
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 12:03:36.600832 2025] [security2:error] [pid 10238:tid 10258] [client 45.145.130.114:13059] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.145.130.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 12:03:36.600832 2025] [security2:error] [pid 10238:tid 10258] [client 45.145.130.114:13059] [client 45.145.130.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eaglemansion.pyxelstudios.com"] [uri "/.env"] [unique_id "Z7336GIcVUbJ5nlmN7FmwwAAAI4"], referer: https://tasamm.com/about/eee6.html
show less
Brute-Force
Bad Web Bot
Web App Attack
