🇺🇸
TPI-Abuse
2026-10-01 20:25:36
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 190.66.116.21 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 190.66.116.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 16:25:31.548261 2026] [security2:error] [pid 6449:tid 6449] [client 190.66.116.21:35930] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||edscontracting.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "edscontracting.com"] [uri "/403.html"] [unique_id "ar7Bu3OvK-HYVUfGHvI-WwAAACM"], referer: https://sitebacklinkgenerator.shop/dir/backlinks-for-websites-62143
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-09-12 04:06:24
(3 weeks ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show more
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-12T04:06:24Z.
show less
Bad Web Bot
🇨🇭
Kepler-1649c
2025-06-20 04:03:00
(1 year ago)
Spam
Email Spam
2025-06-07 05:25:16
(1 year ago)
Ports: 25,2525,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-06-07 01:20:29
(1 year ago)
Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇸🇰
EVISION
2025-06-04 05:16:00
(1 year ago)
Phishing
Email Spam
Spoofing
2023-06-03 20:30:58
(3 years ago)
Jun 3 22:30:57 ns3130050 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): use ...
show more
Jun 3 22:30:57 ns3130050 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=<[email protected] >, method=PLAIN, rip=190.66.116.21, lip=151.80.195.3, TLS, session=<6DLJiz/9qM2+QnQV>
...
show less
Brute-Force
Web App Attack
🇬🇧
Joe-Mark
2023-06-03 07:21:29
(3 years ago)
Rejected on IP Reputation - Mcafee Exchange Plug-in (101)
Email Spam
2023-05-30 12:02:05
(3 years ago)
[Tue May 30 14:02:00.422114 2023] [fcgid:warn] [pid 7066:tid 140113409455872] [client 190.66.116.21: ...
show more
[Tue May 30 14:02:00.422114 2023] [fcgid:warn] [pid 7066:tid 140113409455872] [client 190.66.116.21:57456] mod_fcgid: stderr: WP User : vx-webmaster authentication failure | IP : 190.66.116.21 | URL https://www.cma-shopping.com/wp-admin/, referer: https://www.cma-shopping.com/wp-login.php
[Tue May 30 14:02:01.901803 2023] [fcgid:warn] [pid 6787:tid 140112729974528] [client 190.66.116.21:57770] mod_fcgid: stderr: WP User : [email protected] authentication failure | IP : 190.66.116.21 | URL https://www.cma-shopping.com/wp-admin/, referer: https://www.cma-shopping.com/wp-login.php
[Tue May 30 14:02:04.343065 2023] [fcgid:warn] [pid 7066:tid 140114021828352] [client 190.66.116.21:58165] mod_fcgid: stderr: WP User : admin authentication failure | IP : 190.66.116.21 | URL https://www.cma-shopping.com/wp-admin/, referer: https://www.cma-shopping.com/wp-login.php
...
show less
Brute-Force
Web App Attack
🇳🇱
maxxsense
2023-05-29 13:18:16
(3 years ago)
*Port Scan* detected from 190.66.116.21 (CO/Colombia/-).
Port Scan
