🇺🇸
TPI-Abuse
2026-11-10 12:32:08
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:32:04.242180 2026] [security2:error] [pid 21681:tid 21681] [client 45.66.211.248:12779] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:32:04.242180 2026] [security2:error] [pid 21681:tid 21681] [client 45.66.211.248:12779] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/941"] [unique_id "avMOxOhWDj4j3qcgY7F1bQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 09:35:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:35:18.686791 2026] [security2:error] [pid 29951:tid 29951] [client 45.66.211.248:25431] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:35:18.686791 2026] [security2:error] [pid 29951:tid 29951] [client 45.66.211.248:25431] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mms-boss.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mms-boss.net"] [uri "/images/index.php"] [unique_id "avLlVkxPWsKmST2Mww7OIAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:44:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:44:04.946393 2026] [security2:error] [pid 23687:tid 23687] [client 45.66.211.248:58441] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:44:04.946393 2026] [security2:error] [pid 23687:tid 23687] [client 45.66.211.248:58441] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||backstore.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "backstore.com"] [uri "/backstore/weight-loss.htm"] [unique_id "avHAFE7dUg5ebO78lIyBBwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-08 01:59:58
UTC ·
(3 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 03:46:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 22:45:55.230625 2026] [security2:error] [pid 31322:tid 31322] [client 45.66.211.248:36453] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 22:45:55.230625 2026] [security2:error] [pid 31322:tid 31322] [client 45.66.211.248:36453] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.clayrivers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.clayrivers.com"] [uri "/wp-includes/js/comment-reply.min.js"] [unique_id "augHc5J18Hbcfxas0Yx1dQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:44:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:44:04.293929 2026] [security2:error] [pid 20101:tid 20101] [client 45.66.211.248:46015] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:44:04.293929 2026] [security2:error] [pid 20101:tid 20101] [client 45.66.211.248:46015] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.partybuseslansing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.partybuseslansing.com"] [uri "/"] [unique_id "auN31Girz-qL1t20HCia8QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 15:52:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:52:11.494429 2026] [security2:error] [pid 26228:tid 26228] [client 45.66.211.248:13063] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:52:11.494429 2026] [security2:error] [pid 26228:tid 26228] [client 45.66.211.248:13063] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/tag/ian-mckellen/"] [unique_id "auNrq1xkTj3xhYmCYxOhgAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-14 06:23:05
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2026-09-14T07:03:00+02:00 vpn Access-Reject 'daniela.zunino' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '< ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2026-09-14T07:03:00+02:00 vpn Access-Reject 'daniela.zunino' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-13 13:51:27
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2026-09-13T14:20:33+02:00 vpn Access-Reject 'chanjira' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2026-09-13T14:20:33+02:00 vpn Access-Reject 'chanjira' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-11 03:23:31
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2026-09-11T04:28:47+02:00 vpn Access-Reject '60.248.0.207' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<re ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2026-09-11T04:28:47+02:00 vpn Access-Reject '60.248.0.207' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇧🇪
Saec
2026-07-15 16:40:09
UTC ·
(3 months ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (2× on saec.me)
Port Scan
Web App Attack
2025-10-17 04:24:57
UTC ·
(1 year ago)
IM360 WAF: Request Indicates a Security Scanner Scanned the Site MV:sqlmap/1.9.10#stable (https://sqlmap.org)
Port Scan
🇩🇪
Packets-Decreaser.NET
2025-09-28 17:36:45
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇨🇿
lp
2025-03-15 02:53:28
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2025-03-15T02:37:07+01:00 vpn Access-Reject 'demo' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇨🇿
lp
2025-02-16 14:49:45
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2025-02-16T15:11:15+01:00 vpn Access-Reject 'concordancy' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<red ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.248
2025-02-16T15:11:15+01:00 vpn Access-Reject 'concordancy' station: 45.66.211.248 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
