2026-01-30 08:41:18
(4 months ago)
Malicious activity detected
Hacking
Web App Attack
🇦🇺
Block Rockin' Beats
2026-01-19 04:58:03
(4 months ago)
Scanning forum with forged referal
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-01-18 09:19:43
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 04:19:40.631434 2026] [security2:error] [pid 168977:tid 168977] [client 45.145.131.32:20099] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nancyscafeandcatering.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nancyscafeandcatering.com"] [uri "/contact-us/"] [unique_id "aWylrDowo19qGv_YHZh0oQAAAA0"], referer: http://www.nancyscafeandcatering.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-12-18 22:16:15
(5 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-16.45.145.131.32.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-16.45.145.131.32.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2025-12-11 07:57:12
(5 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-57.45.145.131.32.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-57.45.145.131.32.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 01:52:32
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 20:52:29.254777 2025] [security2:error] [pid 13205:tid 13205] [client 45.145.131.32:56311] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||restaurantfixture.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "restaurantfixture.com"] [uri "/"] [unique_id "aTOMXRcSK477Lrlrlj2FAQAAABY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 03:13:23
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 22:13:17.350731 2025] [security2:error] [pid 31183:tid 31189] [client 45.145.131.32:45053] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pluralmatrix.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pluralmatrix.com"] [uri "/"] [unique_id "aTD8TTs5BLCZXPCob-P7uQAAAME"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-18 21:43:37
(7 months ago)
Forum/form spam
Web Spam
🇪🇸
Global Cyber Police
2025-08-19 21:02:46
(9 months ago)
Part of botnet that all have no referrer and always use the exact spoofed agent: Mozilla/5.0 (compat ...
show more
Part of botnet that all have no referrer and always use the exact spoofed agent: Mozilla/5.0 (compatible; crawler)
show less
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇨🇦
wil.com
2024-10-20 05:18:44
(1 year ago)
GlobalProtect login attempts with user backup.
VPN IP
Brute-Force
🇷🇺
sms.ru
2024-09-22 05:00:10
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
2024-03-17 01:56:35
(2 years ago)
Unauthorized VPN login attempts
Hacking
Brute-Force
🇺🇸
ChamberofCommerce.com
2023-12-13 19:10:48
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot