🇺🇸
TPI-Abuse
2026-11-10 00:02:43
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:02:35.310808 2026] [security2:error] [pid 22720:tid 22720] [client 45.147.235.61:21951] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:02:35.310808 2026] [security2:error] [pid 22720:tid 22720] [client 45.147.235.61:21951] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||balivisaservice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "balivisaservice.com"] [uri "/staging/single-business-visa/"] [unique_id "avJfG1zVFls82GvDq0N_kgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 16:09:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:09:17.323502 2026] [security2:error] [pid 6010:tid 6010] [client 45.147.235.61:38657] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:09:17.323502 2026] [security2:error] [pid 6010:tid 6010] [client 45.147.235.61:38657] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.srossi.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.srossi.net"] [uri "/2010/index.html"] [unique_id "audkLUxCSF0_KL5IdQYuLAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:37:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:37:30.470233 2026] [security2:error] [pid 3139:tid 3139] [client 45.147.235.61:57975] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:37:30.470233 2026] [security2:error] [pid 3139:tid 3139] [client 45.147.235.61:57975] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/2012/03/09/2012-book-7-the-optimists-daughter/"] [unique_id "auWoymeSjY2Pl4N9NprOIgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
craudiovizai
2026-10-05 00:30:34
UTC ·
(1 month ago)
Automated honeypot detection. blocked ip against a Next.js application. Paths: /manager, /wp-login.php. Blocked at the edge.
Bad Web Bot
🇨🇦
DRI
2026-08-25 22:29:01
UTC ·
(2 months ago)
Web attack/Malicious activity detected
Web App Attack
2026-08-15 20:35:09
UTC ·
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-35.45.147.235.61.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇺🇸
TPI-Abuse
2026-08-14 14:32:51
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 10:32:43.268377 2026] [security2:error] [pid 23239:tid 23239] [client 45.147.235.61:35121] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 10:32:43.268377 2026] [security2:error] [pid 23239:tid 23239] [client 45.147.235.61:35121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||zodiacwin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "zodiacwin.com"] [uri "/"] [unique_id "an8nC3C6R77QwtS8EqBUzwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-14 12:13:35
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 08:13:27.744525 2026] [security2:error] [pid 31772:tid 31772] [client 45.147.235.61:40213] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 08:13:27.744525 2026] [security2:error] [pid 31772:tid 31772] [client 45.147.235.61:40213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||primacomm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "primacomm.com"] [uri "/"] [unique_id "an8GZxCjLCYJ3qJ9f8oWlAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2025-12-23 11:22:38
UTC ·
(10 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.147.235.61 (US/United States/-): 1 in the last 3600 secs (0-197)
Hacking
🇺🇸
fbarela
2025-11-27 23:01:01
UTC ·
(11 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
