Total reports
7 from
6 distinct
reporters
First reported
October 9th 2021
Most recent report
1 hour ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
2
Most common categories
Web App Attack
2
Bad Web Bot
2
Brute-Force
2
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-11 19:30:35
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:30:30.978682 2026] [security2:error] [pid 7009:tid 7009] [client 45.66.211.213:30619] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:30:30.978682 2026] [security2:error] [pid 7009:tid 7009] [client 45.66.211.213:30619] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fiasdesigns.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fiasdesigns.com"] [uri "/feed/"] [unique_id "avTCVoC1aWHEPr0-7a0TdwAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 11:20:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:20:37.957863 2026] [security2:error] [pid 27659:tid 27659] [client 45.66.211.213:43101] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:20:37.957863 2026] [security2:error] [pid 27659:tid 27659] [client 45.66.211.213:43101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.davidnevue.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.davidnevue.com"] [uri "/assets/fonts-icons/fontawesome-webfont.eot"] [unique_id "avL-BUj5-kEbxO-sIt9gFgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-10-09 01:55:27
UTC ·
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇷🇺
sms.ru
2024-09-21 02:35:06
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇺🇸
MrDD
2024-07-09 18:19:09
UTC ·
(2 years ago)
Brute Force on Cisco Web VPN
Brute-Force
🇵🇱
rafix
2023-11-03 06:29:55
UTC ·
(3 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
2021-10-09 07:24:44
UTC ·
(5 years ago)
Web App Attack
