🇺🇸
TPI-Abuse
2026-11-10 12:53:30
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:53:24.530078 2026] [security2:error] [pid 5173:tid 5203] [client 45.66.210.21:65253] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:53:24.530078 2026] [security2:error] [pid 5173:tid 5203] [client 45.66.210.21:65253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||howardhallis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howardhallis.com"] [uri "/doctorstrange/foreign/files/book.swf"] [unique_id "avMTxIjiijBUs4YYY3-TwAAAAVI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 08:42:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:41:55.191419 2026] [security2:error] [pid 8073:tid 8073] [client 45.66.210.21:11329] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:41:55.191419 2026] [security2:error] [pid 8073:tid 8073] [client 45.66.210.21:11329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||koshland.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "koshland.org"] [uri "/"] [unique_id "auRYU_ataveQDaijJ0R1rAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 20:44:02
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:43:57.215810 2026] [security2:error] [pid 5669:tid 5669] [client 45.66.210.21:22795] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:43:57.215810 2026] [security2:error] [pid 5669:tid 5669] [client 45.66.210.21:22795] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||valuechains4poor.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "valuechains4poor.net"] [uri "/general-references.html"] [unique_id "auJejYOYKLfW-CVCJrsougAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 11:57:19
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:57:14.070463 2026] [security2:error] [pid 19107:tid 19107] [client 45.66.210.21:27923] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:57:14.070463 2026] [security2:error] [pid 19107:tid 19107] [client 45.66.210.21:27923] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.huboon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.huboon.com"] [uri "/devo800803.html"] [unique_id "auHjGr7wkfi168KaEC2ypgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 07:28:47
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:28:43.278444 2026] [security2:error] [pid 23233:tid 23233] [client 45.66.210.21:20911] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:28:43.278444 2026] [security2:error] [pid 23233:tid 23233] [client 45.66.210.21:20911] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.takemehomedogrescue.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.takemehomedogrescue.org"] [uri "/adoptable-dogs/"] [unique_id "atxeKyhWJrkhpqezT8T3KgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:59:24
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:59:18.613550 2026] [security2:error] [pid 9378:tid 9378] [client 45.66.210.21:57673] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.210.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:59:18.613550 2026] [security2:error] [pid 9378:tid 9378] [client 45.66.210.21:57673] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||book-arts-press.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "book-arts-press.com"] [uri "/Titles/LifeIsPerfect/LifeIsPerfect.html"] [unique_id "atJJ1lpYAXcP8c3coiLe1AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-11 19:05:59
UTC ·
(3 months ago)
45.66.210.21 - - [11/Aug/2026:21:05:49 +0200] "GET /serviceAccountKey.json HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.66.210.21 - - [11/Aug/2026:21:05:49 ...
show more
45.66.210.21 - - [11/Aug/2026:21:05:49 +0200] "GET /serviceAccountKey.json HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.66.210.21 - - [11/Aug/2026:21:05:49 +0200] "GET /firebase-adminsdk.json HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.66.210.21 - - [11/Aug/2026:21:05:50 +0200] "GET /google-cloud-keyfile.json HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.66.210.21 - - [11/Aug/2026:21:05:50 +0200] "GET /.gcloud/credentials HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.66.210.21 - - [11/Aug/2026:21:05:50 +0200] "GET /config/settings.json HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
...
show less
Bad Web Bot
Web App Attack
2025-02-05 21:26:54
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
🇦🇺
oncord
2024-02-14 02:39:17
UTC ·
(2 years ago)
Form spam
Web Spam
🇩🇪
ps-center
2022-02-17 09:26:17
UTC ·
(4 years ago)
SS5,Magento Bruteforce Login Attack POST /index.php/admin/
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2022-02-11 09:04:50
UTC ·
(4 years ago)
C1,Magento Bruteforce Login Attack POST /index.php/admin/
Web Spam
Bad Web Bot
Web App Attack
🇳🇱
xyz.rip
2022-02-06 10:19:12
UTC ·
(4 years ago)
Magento Bruteforce Attempt...
Brute-Force
Web App Attack
🇩🇪
ps-center
2022-02-04 17:24:01
UTC ·
(4 years ago)
SS5,Magento Bruteforce Login Attack POST /index.php/admin/
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2022-02-03 06:36:44
UTC ·
(4 years ago)
C1,Magento Bruteforce Login Attack POST /index.php/admin/
Web Spam
Bad Web Bot
Web App Attack
🇳🇱
xyz.rip
2022-01-28 01:42:54
UTC ·
(4 years ago)
Magento Bruteforce Attempt...
Brute-Force
Web App Attack
