🇺🇸
TPI-Abuse
2026-11-11 23:44:46
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:44:39.171293 2026] [security2:error] [pid 17931:tid 17931] [client 45.145.131.59:54765] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:44:39.171293 2026] [security2:error] [pid 17931:tid 17931] [client 45.145.131.59:54765] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.scoutinsignia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.scoutinsignia.com"] [uri "/o3queries.htm"] [unique_id "avT95wgtEm3m5cxi64uHOgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 01:17:47
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:17:43.355491 2026] [security2:error] [pid 9218:tid 9218] [client 45.145.131.59:60431] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:17:43.355491 2026] [security2:error] [pid 9218:tid 9218] [client 45.145.131.59:60431] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||acmax.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acmax.com"] [uri "/home/index.php/timers-2/real-time-timer-2"] [unique_id "auPwNxu9YB5jh9tUW0sHYgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:00:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:00:13.922987 2026] [security2:error] [pid 25145:tid 25145] [client 45.145.131.59:64261] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:00:13.922987 2026] [security2:error] [pid 25145:tid 25145] [client 45.145.131.59:64261] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||antoniocobo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "antoniocobo.com"] [uri "/architecture/rodas/"] [unique_id "auNtjXVY4aioB_3w8jxRrgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 06:04:26
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 02:04:22.494311 2026] [security2:error] [pid 27855:tid 27855] [client 45.145.131.59:45305] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 02:04:22.494311 2026] [security2:error] [pid 27855:tid 27855] [client 45.145.131.59:45305] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/jek/jrgb/int-bib/int.html"] [unique_id "auLh5se0Ng35mqcbYFha5gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-09 03:22:37
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.145.131.59
2026-09-09T04:40:04+02:00 vpn Access-Reject 'postgres' station: 45.145.131.59 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.145.131.59
2026-09-09T04:40:04+02:00 vpn Access-Reject 'postgres' station: 45.145.131.59 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
2026-09-07 22:04:48
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
C C
2026-08-15 10:31:05
UTC ·
(2 months ago)
Distributed scraping attack: 2168 req from 2069 rotating proxy IPs | this IP: 1 req
Open Proxy
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-07 09:27:19
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
Reinhard
2026-03-20 16:51:34
UTC ·
(7 months ago)
Harvesting non-existent pages or unknown malicious BOT.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-14 12:52:18
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 08:52:11.452761 2026] [security2:error] [pid 2838:tid 2838] [client 45.145.131.59:25607] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 08:52:11.452761 2026] [security2:error] [pid 2838:tid 2838] [client 45.145.131.59:25607] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Lift Chairs/Value Series/Value Fabrics/Thumbs.db"] [unique_id "abVZ-1jPq1rX6F1c0gkhvwAAABg"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Lift%20Chairs/Value%20Series/Value%20Fabrics/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-12 06:02:24
UTC ·
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 02:02:17.525583 2026] [security2:error] [pid 29636:tid 29636] [client 45.145.131.59:21537] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.145.131.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 02:02:17.525583 2026] [security2:error] [pid 29636:tid 29636] [client 45.145.131.59:21537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||baselinesc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "baselinesc.com"] [uri "/"] [unique_id "abJW6ZQyqMZW7kJui9TRQQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nodepile
2026-02-15 10:13:49
UTC ·
(8 months ago)
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/product_info.php ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.541.186 Safari/537.36')
Open Proxy
VPN IP
🇨🇭
backslash
2026-02-10 01:30:04
UTC ·
(9 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
