🇺🇸
TPI-Abuse
2026-11-14 01:01:42
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:01:36.689462 2026] [security2:error] [pid 3863:tid 3863] [client 45.147.9.232:64983] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:01:36.689462 2026] [security2:error] [pid 3863:tid 3863] [client 45.147.9.232:64983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.investorscalifornia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.investorscalifornia.com"] [uri "/private-money-lenders-in-california/"] [unique_id "avey8Lc5fXrzl7e9-KvYrwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 08:03:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:03:15.728958 2026] [security2:error] [pid 13077:tid 13077] [client 45.147.9.232:41011] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:03:15.728958 2026] [security2:error] [pid 13077:tid 13077] [client 45.147.9.232:41011] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.catholicshopper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.catholicshopper.com"] [uri "/Lent_Easter"] [unique_id "avVyw5jourDEfVS2IMUE7AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-04 00:21:20
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 06:01:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 01:01:37.676959 2026] [security2:error] [pid 11670:tid 11670] [client 45.147.9.232:36173] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 01:01:37.676959 2026] [security2:error] [pid 11670:tid 11670] [client 45.147.9.232:36173] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||enfiestate.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "enfiestate.com"] [uri "/env.php"] [unique_id "augnQVlbVPf9GVfwRw-HAAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-30 11:42:01
UTC ·
(2 weeks ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-28 19:27:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:27:32.817679 2026] [security2:error] [pid 14973:tid 14973] [client 45.147.9.232:62985] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:27:32.817679 2026] [security2:error] [pid 14973:tid 14973] [client 45.147.9.232:62985] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.player-care.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.player-care.com"] [uri "/valves.html"] [unique_id "auJMpEdUeG7MYicILh16wgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 22:52:31
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:52:27.151929 2026] [security2:error] [pid 777:tid 777] [client 45.147.9.232:18457] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:52:27.151929 2026] [security2:error] [pid 777:tid 777] [client 45.147.9.232:18457] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "atqTq5vOP9NxAn4C5BSNLAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-03 08:37:49
UTC ·
(1 month ago)
45.147.9.232 - - [03/Oct/2026:07:34:08 +0200] "GET /user/login HTTP/1.1" 404 1281 "https://av2.solutions/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
IP: 45.147.9.0-45.147.9.255
IP:45.147. ...
show more
45.147.9.232 - - [03/Oct/2026:07:34:08 +0200] "GET /user/login HTTP/1.1" 404 1281 "https://av2.solutions/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
IP: 45.147.9.0-45.147.9.255
IP:45.147.9.0-45.147.9.255
2026-10-03 05:34:15
45.147.9.232 - - [03/Oct/2026:07:34:08 +0200] "GET /user/login HTTP/1.1" 404 1281 "https://av2.solutions/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
45.147.9.232 - - [03/Oct/2026:07:34:08 +0200] "GET /bitrix/js/main/core/core.js HTTP/1.1" 404 1281 "https://av2.solutions/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
🇺🇸
GreekCity
2026-05-16 17:12:28
UTC ·
(5 months ago)
bad-bot hacking for vulnerable links.
Hacking
Exploited Host
