🇺🇸
TPI-Abuse
2026-11-15 23:37:34
UTC ·
(9 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 18:37:30.894455 2026] [security2:error] [pid 18044:tid 18044] [client 45.145.131.225:9093] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 18:37:30.894455 2026] [security2:error] [pid 18044:tid 18044] [client 45.145.131.225:9093] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/08/06/3-major-ethnic-minority-groups-in-western-iran/"] [unique_id "avpCOpC0Dq5W2G7N6qyYVgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-15 12:00:14
UTC ·
(11 hours ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-01 00:49:05
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 20:49:00.794149 2026] [security2:error] [pid 16748:tid 16748] [client 45.145.131.225:61625] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 20:49:00.794149 2026] [security2:error] [pid 16748:tid 16748] [client 45.145.131.225:61625] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/"] [unique_id "auaMfDVvcRUGXLN3vgTLqAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 03:09:17
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:09:09.135197 2026] [security2:error] [pid 18536:tid 18558] [client 45.145.131.225:33243] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:09:09.135197 2026] [security2:error] [pid 18536:tid 18558] [client 45.145.131.225:33243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tkfay.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tkfay.com"] [uri "/author/admin/"] [unique_id "auAV1TGVY_9psrfTeaS2eQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 11:43:35
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 07:43:29.452461 2026] [security2:error] [pid 28798:tid 28798] [client 45.145.131.225:61731] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 07:43:29.452461 2026] [security2:error] [pid 28798:tid 28798] [client 45.145.131.225:61731] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pennylanefarmsauces.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pennylanefarmsauces.com"] [uri "/Recipes.htm"] [unique_id "atyZ4a8qDTHcznj58Fpq7gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Oakley
2026-08-18 17:06:37
UTC ·
(2 months ago)
(mod_security) mod_security (id:900178) triggered by 45.145.131.225 (IL/Israel/-): 5 in the last 900 secs
Web App Attack
Hacking
2026-08-16 11:56:04
UTC ·
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-56.45.145.131.225.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-07-01 15:22:36
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-22.45.145.131.225.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇬🇧
Oakley
2026-07-01 09:34:09
UTC ·
(4 months ago)
(mod_security) mod_security (id:900177) triggered by 45.145.131.225 (IL/Israel/-): 5 in the last 900 secs
Web App Attack
Hacking
🇫🇮
JimArchon72
2026-06-28 01:45:04
UTC ·
(4 months ago)
2026/06/28 01:40:39 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
2026-06-28 01:03:14
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-03.45.145.131.225.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇬🇧
Oakley
2026-06-21 09:03:00
UTC ·
(4 months ago)
(mod_security) mod_security (id:900177) triggered by 45.145.131.225 (IL/Israel/-): 5 in the last 900 secs
Web App Attack
Hacking
🇩🇪
netclix.gr
2026-05-04 11:32:13
UTC ·
(6 months ago)
(mod_security) mod_security triggered on hostname [redacted] 45.145.131.225 (IL/Israel/-): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-03-05 19:39:42
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 14:39:23.469549 2026] [security2:error] [pid 4489:tid 4489] [client 45.145.131.225:16361] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.145.131.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 14:39:23.469549 2026] [security2:error] [pid 4489:tid 4489] [client 45.145.131.225:16361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.csm-dtc.com"] [uri "/wp-config.php.txt"] [unique_id "aanb6yOWLWntGdKq1AaEkAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-24 18:02:13
UTC ·
(8 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
