🇺🇸
TPI-Abuse
2026-11-08 14:16:40
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:16:32.694420 2026] [security2:error] [pid 1868:tid 1868] [client 45.147.8.48:62453] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:16:32.694420 2026] [security2:error] [pid 1868:tid 1868] [client 45.147.8.48:62453] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ofertasdetrabajosyempleos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ofertasdetrabajosyempleos.com"] [uri "/venezuela/buscador-auxiliar-merida-merida.php"] [unique_id "avCEQHmEeIr1NtbMaQbWRQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:36:51
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:36:44.220178 2026] [security2:error] [pid 19837:tid 19837] [client 45.147.8.48:20919] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:36:44.220178 2026] [security2:error] [pid 19837:tid 19837] [client 45.147.8.48:20919] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onward.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/page2/styled-11/index.html"] [unique_id "au1LTHbvEu9Ud6BP4DfUXwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 02:14:31
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:14:25.951048 2026] [security2:error] [pid 22936:tid 22944] [client 45.147.8.48:40207] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:14:25.951048 2026] [security2:error] [pid 22936:tid 22944] [client 45.147.8.48:40207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||whatismetamodern.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "whatismetamodern.com"] [uri "/post/51983448294/thats-awesome-the-evolution-of-a-phrase"] [unique_id "auvmgZWcAiPxTh-xUBAycwAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 05:42:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:42:29.090707 2026] [security2:error] [pid 16885:tid 16885] [client 45.147.8.48:27627] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:42:29.090707 2026] [security2:error] [pid 16885:tid 16885] [client 45.147.8.48:27627] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.obgynhistory.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.obgynhistory.com"] [uri "/milestones/"] [unique_id "atxFRSUwoRsHSwRkE9brqgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 13:46:38
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:46:34.406766 2026] [security2:error] [pid 24358:tid 24358] [client 45.147.8.48:48259] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.8.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:46:34.406766 2026] [security2:error] [pid 24358:tid 24358] [client 45.147.8.48:48259] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.doctorc.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.doctorc.net"] [uri "/Labs/Lab19/NOTES/Peristal.htm"] [unique_id "attlOiw1gsLV-GjoIS6gGwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-30 02:35:32
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-35.45.147.8.48.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇩🇪
LRob
2026-06-16 11:45:08
UTC ·
(4 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2026-06-13 16:13:08
UTC ·
(4 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-09 18:09:09
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
