🇺🇸
TPI-Abuse
2026-11-14 13:18:30
UTC ·
(13 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:18:24.920876 2026] [security2:error] [pid 31500:tid 31500] [client 45.159.22.124:34295] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:18:24.920876 2026] [security2:error] [pid 31500:tid 31500] [client 45.159.22.124:34295] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/Human-Touch-Perfect-Chair-Recliner/Human-Touch-PC-LiVE-PC-420-Manual-Perfect-Chair-Recliner-Espresso-Premium-Leather-Matte-Black-Wood-Base.htm"] [unique_id "avhfoGSjC-PkLSTZGfbhagAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-14 01:57:31
UTC ·
(11 hours ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-13 00:22:07
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 19:22:00.766944 2026] [security2:error] [pid 42337:tid 42337] [client 45.159.22.124:58683] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 19:22:00.766944 2026] [security2:error] [pid 42337:tid 42337] [client 45.159.22.124:58683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tobyjohnson.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tobyjohnson.com"] [uri "/review-clausen-love-together.html"] [unique_id "avZYKBhCt-Z5iMiJvHoHJAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:45:34
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:45:25.474559 2026] [security2:error] [pid 10434:tid 10434] [client 45.159.22.124:21091] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:45:25.474559 2026] [security2:error] [pid 10434:tid 10434] [client 45.159.22.124:21091] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.newcastle91.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.newcastle91.org"] [uri "/events/memorial-day-parade-and-cookout/"] [unique_id "avEltRIE1US9lL_8sORRtAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 10:45:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 05:45:08.588039 2026] [security2:error] [pid 7096:tid 7096] [client 45.159.22.124:12557] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 05:45:08.588039 2026] [security2:error] [pid 7096:tid 7096] [client 45.159.22.124:12557] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/addiction/"] [unique_id "aum7NEt4A7lr4NIT89H_wwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 13:20:13
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:20:09.970734 2026] [security2:error] [pid 7650:tid 7650] [client 45.159.22.124:53815] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:20:09.970734 2026] [security2:error] [pid 7650:tid 7650] [client 45.159.22.124:53815] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/trace.htm"] [unique_id "attfCaXMT2XaG-YbmaEqPQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 12:07:45
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 08:07:39.470398 2026] [security2:error] [pid 25209:tid 25209] [client 45.159.22.124:28995] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.22.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 08:07:39.470398 2026] [security2:error] [pid 25209:tid 25209] [client 45.159.22.124:28995] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||orleansdartclub.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "orleansdartclub.com"] [uri "/"] [unique_id "attOCwAdfZ14Ib3eMNmnEwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-05 20:27:28
UTC ·
(1 month ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
2026-10-05 05:38:44
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-10-03 16:19:50
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-10-03 03:53:35
UTC ·
(1 month ago)
Brute force
Brute-Force
2026-10-01 10:39:49
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-09-27 08:32:38
UTC ·
(1 month ago)
Brute force
Brute-Force
🇩🇪
FeG Deutschland
2026-09-18 05:35:45
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
Hazzard
2026-09-16 14:52:43
UTC ·
(1 month ago)
(wordpress) Failed wordpress login from 45.159.22.124 (US/United States/-/-/-/[redacted]): (CF_ENABLE)
Brute-Force
