🇺🇸
TPI-Abuse
2026-10-27 17:11:51
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 13:11:46.973424 2026] [security2:error] [pid 6694:tid 6694] [client 45.66.211.29:62857] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cleaningmedical.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cleaningmedical.com"] [uri "/2019/10/08/feeling-similar-to-a-family-rotating-points-4-4/"] [unique_id "auDbUmEpc_mdLxZt6nunYQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-14 11:01:44
(2 months ago)
Botnet activity
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-08-12 11:27:05
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇩🇪
NxtGenIT
2026-08-11 21:27:31
(2 months ago)
CiscoASA Honeypot hit, Payload: "GET / HTTP/1.1" 200 -,
Brute-Force
🇩🇪
NxtGenIT
2026-08-10 23:13:05
(2 months ago)
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/ HTTP/1.1" 404 -,
Brute-Force
🇺🇸
nationaleventpros.com
2026-06-14 21:58:12
(4 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 19:55:09
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:55:00.633323 2026] [security2:error] [pid 7402:tid 7402] [client 45.66.211.29:50213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||otfes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "otfes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ainBFHW_QWg_MS-CW5LeSwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 16:52:31
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:52:25.384743 2026] [security2:error] [pid 12076:tid 12076] [client 45.66.211.29:18229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||heathdiesel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heathdiesel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aihEyVLm9JEfQra7IYXUWAAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-09 02:38:29
(4 months ago)
Web password guessing
Brute-Force
🇫🇷
dynamix
2026-05-27 09:32:29
(5 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 02:32:16
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 22:32:08.114543 2026] [security2:error] [pid 30172:tid 30190] [client 45.66.211.29:44027] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jd-web-designs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jd-web-designs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahO0qDLwYvYYGE1Zer4KtgAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 16:06:59
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 12:06:52.372100 2026] [security2:error] [pid 25383:tid 25383] [client 45.66.211.29:41165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||divesfl.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "divesfl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agdEnEVS8kM8UCqaTmmJlAAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-05-14 18:09:34
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
kosada.com
2026-04-29 21:38:29
(5 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-04-17 08:29:36
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.66.211.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 04:29:32.139162 2026] [security2:error] [pid 723022:tid 723022] [client 45.66.211.29:60049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mikelynchphoto.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mikelynchphoto.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeHvbJoqkzNMwizaQGBZ4AAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
