🇺🇸
TPI-Abuse
2026-11-13 07:18:44
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:18:39.603258 2026] [security2:error] [pid 10414:tid 10429] [client 45.147.9.56:27193] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:18:39.603258 2026] [security2:error] [pid 10414:tid 10429] [client 45.147.9.56:27193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fastesttrademark.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fastesttrademark.com"] [uri "/BENEFITS.html"] [unique_id "ava5z2LoxlYFNfpHoVGSAgAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:31:22
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:31:16.480909 2026] [security2:error] [pid 28074:tid 28074] [client 45.147.9.56:9691] ModSec ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:31:16.480909 2026] [security2:error] [pid 28074:tid 28074] [client 45.147.9.56:9691] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/propaganda/"] [unique_id "avYUBIlHJHRDsBowirL6OQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 01:58:38
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:58:31.512727 2026] [security2:error] [pid 13869:tid 13936] [client 45.147.9.56:49681] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:58:31.512727 2026] [security2:error] [pid 13869:tid 13936] [client 45.147.9.56:49681] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fishrapper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishrapper.com"] [uri "/articles/progressive-tip-ups-tactics-pennaz.html"] [unique_id "avPLxwZHz1L7Nhx04QHmVAAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:00:51
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:00:45.301660 2026] [security2:error] [pid 28098:tid 28098] [client 45.147.9.56:57967] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:00:45.301660 2026] [security2:error] [pid 28098:tid 28098] [client 45.147.9.56:57967] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/maamarim/11/Wolfman/03-01.html"] [unique_id "avG17f1rrLHfvkdn4N3MWQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 08:21:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:21:38.053818 2026] [security2:error] [pid 16855:tid 16855] [client 45.147.9.56:14945] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:21:38.053818 2026] [security2:error] [pid 16855:tid 16855] [client 45.147.9.56:14945] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/06/18/justice-kennedy-asks-us-to-rethink-u-s-prisons-broadly/"] [unique_id "aumZkptYf2xev43mJr3NmQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 12:36:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:36:52.750616 2026] [security2:error] [pid 20151:tid 20151] [client 45.147.9.56:47205] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:36:52.750616 2026] [security2:error] [pid 20151:tid 20151] [client 45.147.9.56:47205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/142-62-1.html"] [unique_id "auXg5IpELja2srxWvP30gQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 18:23:01
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:22:54.938117 2026] [security2:error] [pid 31161:tid 31161] [client 45.147.9.56:41245] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:22:54.938117 2026] [security2:error] [pid 31161:tid 31161] [client 45.147.9.56:41245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.exit10band.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.exit10band.com"] [uri "/robots.txt"] [unique_id "auOO_vZh010aSShjqBv1PgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇰
sandra361
2026-10-06 14:06:17
UTC ·
(1 month ago)
Port scan detected: 13 attempts across 1 port (1122). | Evidence: REAPER_TARPIT: IN=eth0 SRC=45.147.9.56 LEN=40 TOS=0x14 PREC=0x00 TTL=113 ID=63699 DF PROTO=TCP SPT=58819 DPT=1122 WINDOW=42340 RES=0x00 ACK URGP=0
Port Scan
🇭🇰
sandra361
2026-09-23 14:04:17
UTC ·
(1 month ago)
Port scan detected: 8 attempts across 1 port (5900). | Evidence: REAPER_TARPIT: IN=eth0 SRC=45.147.9.56 LEN=270 TOS=0x14 PREC=0x00 TTL=115 ID=35729 DF PROTO=TCP SPT=56585 DPT=5900 WINDOW=42340 RES=0x00 ACK PSH URGP=0
Port Scan
🇭🇰
sandra361
2026-09-22 11:46:18
UTC ·
(1 month ago)
Port scan detected: 7 attempts across 1 port (5900). | Evidence: GHOST_SCAN: IN=eth0 SRC=45.147.9.56 LEN=52 TOS=0x14 PREC=0x00 TTL=116 ID=4365 DF PROTO=TCP SPT=60137 DPT=5900 WINDOW=42340 RES=0x00 SYN URGP=0
Port Scan
🇺🇸
donarev419
2026-09-21 16:28:19
UTC ·
(1 month ago)
Connection to port 3306 with data transfer.
Data preview:
Port Scan
Hacking
2026-07-14 06:54:57
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇦🇺
oncord
2026-07-09 18:48:24
UTC ·
(4 months ago)
Form spam
Web Spam
🇺🇸
mw
2026-07-02 10:52:41
UTC ·
(4 months ago)
VPN bruteforce
Brute-Force
🇬🇧
Oakley
2026-07-02 03:21:27
UTC ·
(4 months ago)
(mod_security) mod_security (id:900177) triggered by 45.147.9.56 (US/United States/-): 5 in the last 900 secs
Web App Attack
Hacking
