๐บ๐ธ
TPI-Abuse
2026-10-24 10:43:15
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.148.233.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.148.233.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:43:08.387074 2026] [security2:error] [pid 23735:tid 23735] [client 45.148.233.90:42139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||spirits66.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spirits66.com"] [uri "/h-highway.htm"] [unique_id "atyLvDpxpeQoAhQ4gOZD4wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 14:24:09
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.148.233.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.148.233.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 10:24:04.808625 2026] [security2:error] [pid 7043:tid 7043] [client 45.148.233.90:20309] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||endersworkshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "endersworkshop.com"] [uri "/alphasquadronfable.html"] [unique_id "attuBIiDB179Fawk_oQC7QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
OnTheEdge
2026-09-14 08:16:30
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
๐ธ๐ช
OnTheEdge
2026-09-14 08:16:30
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
๐จ๐ฟ
Countryman
2026-09-14 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
๐จ๐ฟ
lp
2026-09-13 00:23:28
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.233.90
2026-09-13T01:38:04+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.233.90
2026-09-13T01:38:04+02:00 vpn Access-Reject 'Harsh Mahale' station: 45.148.233.90 auth-type: - realm: - nas: <redacted> called: <redacted> => address-pool: - msg: 'Rejected: User-Name contains whitespace'
show less
Brute-Force
Web App Attack
๐บ๐ธ
www.winos.me
2026-08-28 04:26:55
(1 month ago)
Scanning for sensitive files/paths: /xmlrpc.php
Hacking
Web App Attack
๐ฌ๐ท
setupgr
2026-08-19 07:23:05
(2 months ago)
(XMLRPC) WP XMLRPC Attack 45.148.233.90 (US/United States/New York/New York/-/[AS26548 PUREVOLTAGE-I ...
show more
(XMLRPC) WP XMLRPC Attack 45.148.233.90 (US/United States/New York/New York/-/[AS26548 PUREVOLTAGE-INC]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.148.233.90 - - [19/Aug/2026:10:22:32 +0300] "POST /xmlrpc.php HTTP/1.1" 503 7310 "-" "Wget/1.21.4"
show less
Port Scan
๐ญ๐บ
zolav8
2026-05-27 10:28:27
(4 months ago)
SQL injection / web attack attempt
Hacking
SQL Injection
๐ฆ๐บ
MAGIC
2026-05-26 00:08:42
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฉ๐ช
LRob
2026-05-16 12:00:04
(5 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
๐ฉ๐ช
london2038.com
2026-05-10 06:21:35
(5 months ago)
Malformed or malicious web request
45.148.233.90 - - [10/May/2026:08:21:32 +0200] "GET /index.php?pa ...
show more
Malformed or malicious web request
45.148.233.90 - - [10/May/2026:08:21:32 +0200] "GET /index.php?pagefrom=Bloodletter&title=Category%3AWeapons%27AND%2F%2A%2A%2F1785%3DCAST%28%27~%27%7C%7C%28SELECT%2F%2A%2A%2F%28CASE%2F%2A%2A%2FWHEN%2F%2A%2A%2F%281785%3D1785%29%2F%2A%2A%2FTHEN%2F%2A%2A%2F1%2F%2A%2A%2FELSE%2F%2A%2A%2F0%2F%2A%2A%2FEND%29%29%3A%3Atext%7C%7C%27~%27%2F%2A%2A%2FAS%2F%2A%2A%2FNUMERIC%29--+- HTTP/1.1" 400 9353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Hacking
Web App Attack
๐บ๐ธ
hostseries
2025-05-11 17:21:59
(1 year ago)
Brute-force cPanel Services
Brute-Force
๐ฆ๐บ
oncord
2025-05-07 03:49:07
(1 year ago)
Form spam
Web Spam
๐จ๐ณ
ThreatBook.io
2025-05-02 22:11:06
(1 year ago)
2025-05-02 06:47:37 /+CSCOE+/logon.html
Web App Attack