🇺🇸
TPI-Abuse
2026-11-11 16:20:26
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:20:22.768751 2026] [security2:error] [pid 15360:tid 15360] [client 45.147.10.21:13453] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:20:22.768751 2026] [security2:error] [pid 15360:tid 15360] [client 45.147.10.21:13453] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nypatriotcards.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nypatriotcards.com"] [uri "/about-us/"] [unique_id "avSVxsEUo3pi-Lj719KafwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:04:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:04:05.468097 2026] [security2:error] [pid 31135:tid 31135] [client 45.147.10.21:53411] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:04:05.468097 2026] [security2:error] [pid 31135:tid 31135] [client 45.147.10.21:53411] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.player-care.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.player-care.com"] [uri "/gluing-versus-gooing.html"] [unique_id "avHExVQOiX6_w54o4Ijk7AAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:37:34
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:37:30.160461 2026] [security2:error] [pid 32264:tid 32264] [client 45.147.10.21:29657] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:37:30.160461 2026] [security2:error] [pid 32264:tid 32264] [client 45.147.10.21:29657] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||guldunyayayinlari.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "guldunyayayinlari.com"] [uri "/2025/03/ozgur-buyumek-isteyen-kizlar-icin-sira-disi-bir-peri-masali/"] [unique_id "avEVygfVCdpvJp1s0vBFAgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-05 15:46:04
UTC ·
(6 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇧🇷
ICS Labs
2026-11-05 13:22:05
UTC ·
(6 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-05 UTC.
Brute-Force
🇩🇪
ghostwarriors
2026-11-05 07:50:06
UTC ·
(6 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-11-05 07:38:16
UTC ·
(6 days ago)
45.147.10.21 - - [05/Nov/2026:08:38:12 +0100] "GET / HTTP/1.1" 301 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
45.147.10.21 - - [05/Nov/2026:08:38:12 +0100] "GET / HTTP/1.1 ...
show more
45.147.10.21 - - [05/Nov/2026:08:38:12 +0100] "GET / HTTP/1.1" 301 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
45.147.10.21 - - [05/Nov/2026:08:38:12 +0100] "GET / HTTP/1.1" 200 4723 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
45.147.10.21 - - [05/Nov/2026:08:38:12 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
45.147.10.21 - - [05/Nov/2026:08:38:13 +0100] "POST / HTTP/1.1" 200 699 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
45.147.10.21 - - [05/Nov/2026:08:38:13 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
45.147.10
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-02 23:37:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:37:37.867402 2026] [security2:error] [pid 14625:tid 14625] [client 45.147.10.21:48539] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:37:37.867402 2026] [security2:error] [pid 14625:tid 14625] [client 45.147.10.21:48539] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/greece/page/2/"] [unique_id "aukewdTrG2yFuWm8L7M-XAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
snhosting
2026-10-26 00:12:12
UTC ·
(2 weeks ago)
45.147.10.21 - - [26/Oct/2026:01:12:02 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Mobile Safari/537.36"
45.147.10.21 - - [26/Oct/2026:01:12:03 +0 ...
show more
45.147.10.21 - - [26/Oct/2026:01:12:02 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Mobile Safari/537.36"
45.147.10.21 - - [26/Oct/2026:01:12:03 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Mobile Safari/537.36"
45.147.10.21 - - [26/Oct/2026:01:12:03 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Mobile Safari/537.36"
45.147.10.21 - - [26/Oct/2026:01:12:03 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Mobile Safari/537.36"
45.147.10.21 - - [26/Oct/2026:01:12:03 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Mobile Safari/537.3
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-10-22 23:58:54
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:58:48.900996 2026] [security2:error] [pid 15977:tid 15977] [client 45.147.10.21:21613] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:58:48.900996 2026] [security2:error] [pid 15977:tid 15977] [client 45.147.10.21:21613] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.powerkiteforum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "atqjOPTNUKNvCrLICh93CgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:38:10
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:38:07.075347 2026] [security2:error] [pid 15240:tid 15240] [client 45.147.10.21:45323] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:38:07.075347 2026] [security2:error] [pid 15240:tid 15240] [client 45.147.10.21:45323] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jasonpolland.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jasonpolland.com"] [uri "/bnw034.html"] [unique_id "atkir7iTLiZ9I0tdcjdJYQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 08:42:44
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 04:42:37.423234 2025] [security2:error] [pid 19366:tid 19366] [client 45.147.10.21:63987] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 04:42:37.423234 2025] [security2:error] [pid 19366:tid 19366] [client 45.147.10.21:63987] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||luciferdirective.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "luciferdirective.com"] [uri "/"] [unique_id "aMKLfSiIQdA9qCdl8DETdQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
