🇺🇸
TPI-Abuse
2026-11-10 14:37:36
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:37:31.280081 2026] [security2:error] [pid 5873:tid 5873] [client 45.66.211.69:53683] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:37:31.280081 2026] [security2:error] [pid 5873:tid 5873] [client 45.66.211.69:53683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.drpeppard.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.drpeppard.com"] [uri "/html/patient_forms.html"] [unique_id "avMsKxh4vxmaRPQkQxfn9QAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 13:25:57
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:25:51.825643 2026] [security2:error] [pid 3990878:tid 3990882] [client 45.66.211.69:20355] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:25:51.825643 2026] [security2:error] [pid 3990878:tid 3990882] [client 45.66.211.69:20355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.lordennerdale.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.lordennerdale.com"] [uri "/terms.htm"] [unique_id "avMbX_qXYNnD4BYgrlUUHQAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 12:48:18
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:48:15.370762 2026] [security2:error] [pid 21040:tid 21040] [client 45.66.211.69:20085] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:48:15.370762 2026] [security2:error] [pid 21040:tid 21040] [client 45.66.211.69:20085] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "au8eDyeGT3viVeyU_G4_zgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 16:35:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:35:20.532500 2026] [security2:error] [pid 10742:tid 10742] [client 45.66.211.69:54053] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:35:20.532500 2026] [security2:error] [pid 10742:tid 10742] [client 45.66.211.69:54053] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/custom-wedding-invitations-hanover-pa/"] [unique_id "auIkSNq5nRAnFJ6E6KcizAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 14:55:47
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:55:41.529136 2026] [security2:error] [pid 16810:tid 16810] [client 45.66.211.69:25041] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.66.211.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:55:41.529136 2026] [security2:error] [pid 16810:tid 16810] [client 45.66.211.69:25041] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hacertests.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hacertests.com"] [uri "/examenes-118389-See_you_again_.php"] [unique_id "atzG7bRTn-kLf1BWeDggCwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-20 10:45:02
UTC ·
(3 weeks ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
kosada.com
2026-05-31 18:16:57
UTC ·
(5 months ago)
Web password guessing
Brute-Force
🇺🇸
kosada.com
2026-05-21 11:04:15
UTC ·
(5 months ago)
Web password guessing
Brute-Force
🇺🇸
ambor
2026-05-20 22:06:58
UTC ·
(5 months ago)
Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Web App Attack
🇺🇸
nationaleventpros.com
2026-05-20 04:40:50
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
🇺🇸
kosada.com
2026-05-10 23:33:16
UTC ·
(6 months ago)
Web password guessing
Brute-Force
🇺🇸
ipblock.com
2026-05-09 12:28:00
UTC ·
(6 months ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2025-11-14 22:04:52
UTC ·
(11 months ago)
Web App Attack
Web App Attack
2025-10-10 08:48:35
UTC ·
(1 year ago)
wordpress exploit scan
Web App Attack
🇨🇿
lp
2025-03-20 16:26:33
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.211.69
2025-03-20T16:13:10+01:00 vpn Access-Reject 'alexey' station: 45.66.211.69 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
