🇺🇸
TPI-Abuse
2026-11-15 09:22:47
UTC ·
(24 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:22:41.902836 2026] [security2:error] [pid 27394:tid 27394] [client 45.147.232.72:40169] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:22:41.902836 2026] [security2:error] [pid 27394:tid 27394] [client 45.147.232.72:40169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.watonga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.watonga.com"] [uri "/biblebios/lot/mannliche-prostitution-agypten/"] [unique_id "avl54aVLuhiiCvgzW6JBNQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 17:42:38
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:42:30.491035 2026] [security2:error] [pid 26486:tid 26486] [client 45.147.232.72:56197] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:42:30.491035 2026] [security2:error] [pid 26486:tid 26486] [client 45.147.232.72:56197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.musicrolls.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.musicrolls.com"] [uri "/angelus-amphion-action.html"] [unique_id "avidht1soOYtcktoUToZ4wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
russian-kurort.ru
2026-11-09 09:41:00
UTC ·
(6 days ago)
SYN flood
DDoS Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-06 08:08:50
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:08:46.635321 2026] [security2:error] [pid 32046:tid 32046] [client 45.147.232.72:45671] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:08:46.635321 2026] [security2:error] [pid 32046:tid 32046] [client 45.147.232.72:45671] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/running-boston-a-bittersweet-accomplishment-heather-irvine-april-15-2013/"] [unique_id "au2LDldmUkgfRFCUkLI9dwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 03:39:50
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 22:39:47.642117 2026] [security2:error] [pid 12857:tid 12857] [client 45.147.232.72:40755] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 22:39:47.642117 2026] [security2:error] [pid 12857:tid 12857] [client 45.147.232.72:40755] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.catholicshopper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.catholicshopper.com"] [uri "/products/baby_pin_august.html"] [unique_id "augGA5BW6DXwF8_2LfG2pAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 03:17:28
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 23:17:22.215972 2026] [security2:error] [pid 18357:tid 18357] [client 45.147.232.72:24979] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.232.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 23:17:22.215972 2026] [security2:error] [pid 18357:tid 18357] [client 45.147.232.72:24979] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mail.multilize.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mail.multilize.com"] [uri "/process.html"] [unique_id "at7GQigGqhyTb-XG5JwmmgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-09 19:50:40
UTC ·
(2 months ago)
SIEM ALERT AUTO REPORT
Email Spam
🇫🇷
masterguru
2026-09-02 12:53:22
UTC ·
(2 months ago)
Multiple/Conflicting Connection Header Data Found. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. (920210-201)
Hacking
🇨🇦
DRI
2026-08-22 11:49:26
UTC ·
(2 months ago)
Web attack/Malicious activity detected
Web App Attack
🇫🇮
JimArchon72
2026-07-28 20:05:03
UTC ·
(3 months ago)
2026/07/28 20:04:52 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇬🇧
relianoid.com
2026-07-22 15:10:39
UTC ·
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
GreekCity
2026-02-02 16:07:19
UTC ·
(9 months ago)
bad-bot hacking for vulnerable links.
Hacking
Exploited Host
