🇺🇸
TPI-Abuse
2026-11-14 23:41:11
UTC ·
(7 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.80.104.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:41:04.239675 2026] [security2:error] [pid 1850304:tid 1850304] [client 45.80.104.54:37341] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.80.104.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:41:04.239675 2026] [security2:error] [pid 1850304:tid 1850304] [client 45.80.104.54:37341] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.freepatternstoknit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.freepatternstoknit.com"] [uri "/knitted-baby-clothes-patterns.htm"] [unique_id "avjxkG2hlqrU7qclPBK1OgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 15:28:55
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.80.104.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:28:50.106125 2026] [security2:error] [pid 3357:tid 3357] [client 45.80.104.54:52747] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.80.104.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:28:50.106125 2026] [security2:error] [pid 3357:tid 3357] [client 45.80.104.54:52747] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.naacd.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.naacd.com"] [uri "/index.htm"] [unique_id "avSJsjLoZzI4TdYB1DNDrQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-11 01:51:40
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2026-09-11T02:24:21+02:00 vpn Access-Reject 'ydiagne' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2026-09-11T02:24:21+02:00 vpn Access-Reject 'ydiagne' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 15:39:18
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇩🇪
LRob
2026-06-25 15:15:23
UTC ·
(4 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-03-04 02:19:14
UTC ·
(8 months ago)
[redacted] 45.80.104.54 - - [04/Mar/2026:03:19:10 +0100] "GET /[redacted] HTTP/1.1" 302 1517 0/44297 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 45.80.104.54 ...
show more
[redacted] 45.80.104.54 - - [04/Mar/2026:03:19:10 +0100] "GET /[redacted] HTTP/1.1" 302 1517 0/44297 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 45.80.104.54 - - [04/Mar/2026:03:19:13 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/31132 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
Psycho Solutions LLC
2026-03-03 23:15:38
UTC ·
(8 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 3/3/2026 11:15 pm (UTC-6)
Web App Attack
Bad Web Bot
Web Spam
Hacking
🇨🇦
wil.com
2025-03-28 08:36:05
UTC ·
(1 year ago)
GlobalProtect login attempts with user JESSEB.
VPN IP
Brute-Force
🇸🇪
OnTheEdge
2025-02-03 14:27:53
UTC ·
(1 year ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
lp
2025-01-28 14:50:20
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2025-01-28T15:01:01+01:00 vpn Access-Reject 'throeing' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2025-01-28T15:01:01+01:00 vpn Access-Reject 'throeing' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-01-27 05:50:45
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2025-01-27T05:27:13+01:00 vpn Access-Reject 'upbuoying' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2025-01-27T05:27:13+01:00 vpn Access-Reject 'upbuoying' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-01-22 07:21:45
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2025-01-22T07:50:51+01:00 vpn Access-Reject 'message' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2025-01-22T07:50:51+01:00 vpn Access-Reject 'message' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-01-21 20:50:13
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2025-01-21T20:44:39+01:00 vpn Access-Reject 'applications' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2025-01-21T20:44:39+01:00 vpn Access-Reject 'applications' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2024-11-14 22:27:57
UTC ·
(2 years ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2024-11-14T22:57:22+01:00 vpn Access-Reject 'extender' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.104.54
2024-11-14T22:57:22+01:00 vpn Access-Reject 'extender' station: 45.80.104.54 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
