🇺🇸
TPI-Abuse
2026-11-14 08:43:09
UTC ·
(49 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.248.151.208 (208.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:43:01.604878 2026] [security2:error] [pid 20254:tid 20254 ...
show more
(mod_security) mod_security (id:210350) triggered by 45.248.151.208 (208.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:43:01.604878 2026] [security2:error] [pid 20254:tid 20254] [client 45.248.151.208:55118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbrtome.cl|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbrtome.cl"] [uri "/"] [unique_id "avgfFTFXa2LZfq6cHJIJsgAAAA4"], referer: https://addurl.in/redirect.php?ref_host=framelessglasses.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:18:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.248.151.208 (208.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:18:21.376220 2026] [security2:error] [pid 6218:tid 6218] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.248.151.208 (208.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:18:21.376220 2026] [security2:error] [pid 6218:tid 6218] [client 45.248.151.208:55630] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kentweakley.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kentweakley.com"] [uri "/blog"] [unique_id "avZzbc04Bne5z4OF2XqdmQAAABw"], referer: https://tippetue.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
micropedro
2026-11-10 11:20:59
UTC ·
(3 days ago)
3 incidents: malicious activity. First: 2026-10-29 07:23, Last: 2026-11-10 07:20 UTC. Triggers: unknown.
Port Scan
🇺🇸
TPI-Abuse
2026-10-31 00:34:17
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.248.151.208 (208.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 20:34:11.651286 2026] [security2:error] [pid 26667:tid 26667 ...
show more
(mod_security) mod_security (id:210350) triggered by 45.248.151.208 (208.151.248.45.dotinternetbd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 20:34:11.651286 2026] [security2:error] [pid 26667:tid 26667] [client 45.248.151.208:52416] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||blacksheepoffroad.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blacksheepoffroad.com"] [uri "/"] [unique_id "auU3g_TZvWjuz4_5DSyKAQAAABw"], referer: https://five.co.in/redirect.php?ref_host=openmaint.sk
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
micropedro
2026-10-23 12:10:20
UTC ·
(3 weeks ago)
3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unknown.
Port Scan
🇩🇪
big-cloud.nl
2026-10-23 06:18:49
UTC ·
(3 weeks ago)
Try to access /xmlrpc.php
Web App Attack
2026-10-21 12:11:18
UTC ·
(3 weeks ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
2026-10-17 07:36:44
UTC ·
(4 weeks ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
🇺🇸
micropedro
2026-10-16 19:46:27
UTC ·
(4 weeks ago)
3 incidents: malicious activity. First: 2026-10-05 07:29, Last: 2026-10-16 15:46 UTC. Triggers: unknown.
Port Scan
2026-10-15 07:41:43
UTC ·
(4 weeks ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
🇷🇺
AbuseIPDB informer
2026-10-09 08:39:02
UTC ·
(1 month ago)
nfdump top talker: 45.248.151.208 | first seen 2026-10-09 11:39:02.912 | duration 00:00:00.087 | flows=11 | packets=484902 | bytes=365.0 M | pps=5554 | bps=33.5 M | bpp=752 | proto=any
DDoS Attack
Port Scan
Exploited Host
🇺🇸
鬼影233
2026-10-02 08:00:53
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 16:19:47
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇨🇿
lp
2026-10-01 02:50:21
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 45.248.151.208
2026-10-01T04:27:51+02:00 vpn Access-Reject 'xkarn01' station: 45.248.151.208 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 45.248.151.208
2026-10-01T04:27:51+02:00 vpn Access-Reject 'xkarn01' station: 45.248.151.208 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-10-01T04:50:21+02:00 vpn Access-Reject 'xburi02' station: 45.248.151.208 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-30 12:24:20
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.248.151.208
2026-09-30T13:30:02+02:00 vpn Access-Reject 'xsacp02' station: 45.248.151.208 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.248.151.208
2026-09-30T13:30:02+02:00 vpn Access-Reject 'xsacp02' station: 45.248.151.208 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
