🇺🇸
TPI-Abuse
2026-11-10 16:05:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:05:51.680416 2026] [security2:error] [pid 2884:tid 2884] [client 45.80.105.190:58309] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:05:51.680416 2026] [security2:error] [pid 2884:tid 2884] [client 45.80.105.190:58309] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/106-29-6.html"] [unique_id "avNA3--xADLWTDxk6ADaqwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 18:34:36
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:34:30.621473 2026] [security2:error] [pid 17878:tid 17878] [client 45.80.105.190:22289] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:34:30.621473 2026] [security2:error] [pid 17878:tid 17878] [client 45.80.105.190:22289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/tag/Sports & Entertainment"] [unique_id "au9vNqCsZM4qZrRnVvB_fQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 23:33:05
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:33:00.168104 2026] [security2:error] [pid 3930356:tid 3930381] [client 45.80.105.190:4283 ...
show more
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:33:00.168104 2026] [security2:error] [pid 3930356:tid 3930381] [client 45.80.105.190:42831] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||universalpeacecongress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "universalpeacecongress.com"] [uri "/About-Universal-Peace-Congress-International-Peace-Commission.html"] [unique_id "au0SLCX4sgzUOHhHHvDFkgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 20:27:35
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 16:27:29.910244 2026] [security2:error] [pid 1850:tid 1850] [client 45.80.105.190:64065] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 16:27:29.910244 2026] [security2:error] [pid 1850:tid 1850] [client 45.80.105.190:64065] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/pedstore/k/KrasinaofHenseyHobbyFarm.html"] [unique_id "auEJMQGhWMuO04DZsNMIVgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 02:45:28
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:45:24.139908 2026] [security2:error] [pid 20226:tid 20226] [client 45.80.105.190:37775] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:45:24.139908 2026] [security2:error] [pid 20226:tid 20226] [client 45.80.105.190:37775] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.drjaymissdiana.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.drjaymissdiana.com"] [uri "/WRITINGS/Other Writings/New American Religion.htm"] [unique_id "at1tRB5sGZXQHLjvPf6kVAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-10-21 13:51:48
UTC ·
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
This report was generated by:
https:// ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-09 10:59:38
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:58:15.583863 2026] [security2:error] [pid 25116:tid 25116] [client 45.80.105.190:60393] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.80.105.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:58:15.583863 2026] [security2:error] [pid 25116:tid 25116] [client 45.80.105.190:60393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ablogisticsgroup.com"] [uri "/wp-config.php.original"] [unique_id "aqE7x2A0Xe9uRMj-UOy4ewAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
claude CALVET
2026-08-19 18:52:42
UTC ·
(2 months ago)
gee-Joomla Admin : try to force the door...
Hacking
🇳🇱
Savvii
2026-08-11 00:10:28
UTC ·
(3 months ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-05-29 04:51:00
UTC ·
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
nationaleventpros.com
2026-03-31 08:27:07
UTC ·
(7 months ago)
WordPress login attempt
Brute-Force
🇦🇺
MAGIC
2026-03-17 03:43:44
UTC ·
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
Psycho Solutions LLC
2026-03-04 07:48:27
UTC ·
(8 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 3/4/2026 7:48 am (UTC-6)
Web App Attack
Bad Web Bot
Web Spam
Hacking
🇺🇸
Psycho Solutions LLC
2026-03-04 03:00:21
UTC ·
(8 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 3/4/2026 3:00 am (UTC-6)
Web App Attack
Bad Web Bot
Web Spam
Hacking
🇩🇪
MusicLibrary
2026-03-04 02:42:28
UTC ·
(8 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
