🇺🇸
TPI-Abuse
2026-10-31 09:22:28
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.235.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:22:23.407245 2026] [security2:error] [pid 20041:tid 20041] [client 45.147.235.28:40505] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.235.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:22:23.407245 2026] [security2:error] [pid 20041:tid 20041] [client 45.147.235.28:40505] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cortona.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cortona.ws"] [uri "/chiesa_duomo_it.html"] [unique_id "auWzT6Adqd3deo4N_cyBdQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:36:47
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.235.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:36:41.282294 2026] [security2:error] [pid 9325:tid 9325] [client 45.147.235.28:19319] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.235.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:36:41.282294 2026] [security2:error] [pid 9325:tid 9325] [client 45.147.235.28:19319] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/91-20-3.html"] [unique_id "auJOyVVQef5qduhDSlvOcAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 11:17:45
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.147.235.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:17:36.165486 2026] [security2:error] [pid 23956:tid 23956] [client 45.147.235.28:27323] M ...
show more
(mod_security) mod_security (id:210730) triggered by 45.147.235.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:17:36.165486 2026] [security2:error] [pid 23956:tid 23956] [client 45.147.235.28:27323] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Thumbs.db"] [unique_id "asI10BmJvoAajZ8Zc_BXZgAAAAg"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Danbury%20II/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-09-29 12:11:09
UTC ·
(1 month ago)
Impersonating Good bots
Bad Web Bot
🇫🇮
JimArchon72
2026-09-19 06:50:02
UTC ·
(1 month ago)
2026/09/19 06:48:11 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇬🇧
relianoid.com
2026-08-30 13:21:23
UTC ·
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2026-07-10 04:26:21
UTC ·
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-26.45.147.235.28.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-07-06 21:55:58
UTC ·
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-55.45.147.235.28.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-27 14:30:54
UTC ·
(4 months ago)
Fail2Ban banned 45.147.235.28 for security violations in jail wp-armour. Log: 2026/06/27 14:30:54 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.147.235.28 | Target: wpregistration" , client: 45.147.235.28, server: [REDACTED], r ...
show more
Fail2Ban banned 45.147.235.28 for security violations in jail wp-armour. Log: 2026/06/27 14:30:54 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.147.235.28 | Target: wpregistration" , client: 45.147.235.28, server: [REDACTED], request: "POST /wp-login.php?action=register HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://espsformacion.com/wp-login.php?action=register"
...
show less
Web Spam
🇺🇸
nodepile
2026-06-26 17:07:21
UTC ·
(4 months ago)
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/angel-eyes-by-umnitza/bmw-angel-eyes/6-series/umnitza-ice-lite-bmw-led-upgrade-angel-eyes-for-e39-e60-e65.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ...
show more
Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/angel-eyes-by-umnitza/bmw-angel-eyes/6-series/umnitza-ice-lite-bmw-led-upgrade-angel-eyes-for-e39-e60-e65.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2445.199 Safari/537.36')
show less
Open Proxy
VPN IP
🇦🇺
oncord
2026-06-12 05:30:33
UTC ·
(4 months ago)
Form spam
Web Spam
🇩🇪
Vegascosmetics
2026-05-29 05:51:46
UTC ·
(5 months ago)
Kingcopy(AI-IDS):IP is Probing for Multiple vulnerabilities WTF:Banned
Hacking
Bad Web Bot
🇩🇪
HandyTreff.de
2026-05-25 22:51:39
UTC ·
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -50.937 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3517.1
Web App Attack
Bad Web Bot
🇨🇭
backslash
2026-05-18 09:03:02
UTC ·
(5 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
iNetWorker
2026-04-17 03:28:22
UTC ·
(6 months ago)
trolling for resource vulnerabilities
Web App Attack
