🇺🇸
TPI-Abuse
2026-11-14 03:09:49
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:09:45.294740 2026] [security2:error] [pid 18546:tid 18546] [client 45.147.234.201:24267] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:09:45.294740 2026] [security2:error] [pid 18546:tid 18546] [client 45.147.234.201:24267] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.whodatnation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.whodatnation.com"] [uri "/2011/09/17/new-orleans-saints-defense-still-is-upbeat-despite-setbacks/"] [unique_id "avfQ-bNW1HM_I8piIQL4MQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-05 00:31:29
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 09:20:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:20:04.685107 2026] [security2:error] [pid 5073:tid 5073] [client 45.147.234.201:57405] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:20:04.685107 2026] [security2:error] [pid 5073:tid 5073] [client 45.147.234.201:57405] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.justjunglejuice.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.justjunglejuice.org"] [uri "/"] [unique_id "aumnRG8iI2-8WEslZPClUQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:16:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:16:26.903691 2026] [security2:error] [pid 26701:tid 26701] [client 45.147.234.201:9901] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:16:26.903691 2026] [security2:error] [pid 26701:tid 26701] [client 45.147.234.201:9901] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ncparanormalresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ncparanormalresearch.com"] [uri "/frisco.htm"] [unique_id "auWx6tziFPjp_ZqZgIiqqQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 08:43:49
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:43:44.431737 2026] [security2:error] [pid 6741:tid 6741] [client 45.147.234.201:41435] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:43:44.431737 2026] [security2:error] [pid 6741:tid 6741] [client 45.147.234.201:41435] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/tag/brie-larson/"] [unique_id "auRYwNsVJOAh22gMs468QQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 00:42:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:42:19.369562 2026] [security2:error] [pid 10045:tid 10045] [client 45.147.234.201:13839] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:42:19.369562 2026] [security2:error] [pid 10045:tid 10045] [client 45.147.234.201:13839] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.radionicships.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.radionicships.com"] [uri "/sitemap.xml"] [unique_id "auPn66ovI5Sz8H81SkKTcgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 22:14:42
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:14:34.134558 2026] [security2:error] [pid 7017:tid 7017] [client 45.147.234.201:9873] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.234.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:14:34.134558 2026] [security2:error] [pid 7017:tid 7017] [client 45.147.234.201:9873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oss-in-atm.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oss-in-atm.info"] [uri "/20051207/debriefing.php"] [unique_id "atqKygSpfHAjcrsCBDYgTQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-09-29 08:29:07
UTC ·
(1 month ago)
Impersonating Good bots
Bad Web Bot
2026-09-19 10:24:31
UTC ·
(1 month ago)
"HEAD /wp-json/ HTTP/1.1"
Hacking
Web App Attack
🇬🇧
relianoid.com
2026-09-16 03:12:03
UTC ·
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-11 09:23:31
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.147.234.201
2026-09-11T10:15:53+02:00 vpn Access-Reject 'B' station: 45.147.234.201 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-08 22:50:13
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 10 attempts were recorded from 45.147.234.201
2026-09-08T23:50:43+02:00 vpn Access-Reject 'elizabeth' station: 45.147.234.201 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<re ...
show more
Unauthorized VPN login attempts: 10 attempts were recorded from 45.147.234.201
2026-09-08T23:50:43+02:00 vpn Access-Reject 'elizabeth' station: 45.147.234.201 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-08T23:52:04+02:00 vpn Access-Reject 'd1' station: 45.147.234.201 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-08T23:53:25+02:00 vpn Access-Reject 'w10' station: 45.147.234.201 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-08T23:54:45+02:00 vpn Access-Reject 'administrator' station: 45.147.234.201 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-08T23:56:07+02:00 vpn Access-Reject 'tester' station: 45.147.234.201 auth-type: - realm: vse.cz nas:
show less
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-08-10 04:19:47
UTC ·
(3 months ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇳🇱
MM-bot
2026-08-05 15:24:50
UTC ·
(3 months ago)
URL-probe: HTTP/1.1 GET request on /wp-json/wp/v2/users (2026-08-05 17:24:50 UTC+2)
Web App Attack
Hacking
