🇺🇸
TPI-Abuse
2026-11-13 12:07:58
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:07:51.017732 2026] [security2:error] [pid 12647:tid 12647] [client 45.66.211.215:59381] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:07:51.017732 2026] [security2:error] [pid 12647:tid 12647] [client 45.66.211.215:59381] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.clubfansite.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.clubfansite.com"] [uri "/ashleytisdale/biografia.php"] [unique_id "avb9l7GFgWVRaVahhqjATgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-10 06:31:41
UTC ·
(3 days ago)
Brute force
Brute-Force
🇫🇷
Sklurk
2026-11-05 00:38:56
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 00:04:34
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:04:30.088129 2026] [security2:error] [pid 3814:tid 3814] [client 45.66.211.215:27149] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:04:30.088129 2026] [security2:error] [pid 3814:tid 3814] [client 45.66.211.215:27149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/35"] [unique_id "auPfDmaaYDsJtkBg-h2PGwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:53:37
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:53:28.452173 2026] [security2:error] [pid 9666:tid 9666] [client 45.66.211.215:43177] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:53:28.452173 2026] [security2:error] [pid 9666:tid 9666] [client 45.66.211.215:43177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.transparentforest.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.transparentforest.com"] [uri "/blog/"] [unique_id "atkmSIXaBwzqJjV3xCj7qwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
nationaleventpros.com
2026-07-28 19:55:24
UTC ·
(3 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-07-27 15:12:03
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:11:59.639655 2026] [security2:error] [pid 991402:tid 991402] [client 45.66.211.215:57065] ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:11:59.639655 2026] [security2:error] [pid 991402:tid 991402] [client 45.66.211.215:57065] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgelaceysales.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgelaceysales.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amd1P1ackw4yGZnc6FFqtQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-27 10:04:32
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
kosada.com
2026-07-25 07:14:18
UTC ·
(3 months ago)
Web password guessing
Brute-Force
🇨🇦
DRI
2026-07-24 15:53:15
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-19 19:06:48
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 04:54:40
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 00:54:35.410338 2026] [security2:error] [pid 23133:tid 23133] [client 45.66.211.215:42893] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 00:54:35.410338 2026] [security2:error] [pid 23133:tid 23133] [client 45.66.211.215:42893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spittingimagegallery.kathrynmcbride.com"] [uri "/.env"] [unique_id "afLgi2zk9tZYyWInK-ZgzAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
abuseiphack
2026-04-27 04:07:12
UTC ·
(6 months ago)
Automatic report for brute force attack
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 19:49:27
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 15:49:22.356684 2026] [security2:error] [pid 31579:tid 31579] [client 45.66.211.215:50367] M ...
show more
(mod_security) mod_security (id:210730) triggered by 45.66.211.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 15:49:22.356684 2026] [security2:error] [pid 31579:tid 31579] [client 45.66.211.215:50367] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.audioadds.com.davisound.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.audioadds.com.davisound.com"] [uri "/s3cmd.ini"] [unique_id "ae5sQkpW52jHgKG0SUSR9gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
