🇺🇸
TPI-Abuse
2026-11-07 22:52:02
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 103.220.205.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:51:45.936638 2026] [security2:error] [pid 31029:tid 31029] [client 103.220.205.189:5095 ...
show more
(mod_security) mod_security (id:210350) triggered by 103.220.205.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:51:45.936638 2026] [security2:error] [pid 31029:tid 31029] [client 103.220.205.189:50952] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dictionaryoffish.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dictionaryoffish.com"] [uri "/"] [unique_id "au-rgaBV_pTj4_DeRzkErQAAAAA"], referer: https://alisonselin.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 09:03:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 103.220.205.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:03:17.224093 2026] [security2:error] [pid 8322:tid 8322] [client 103.220.205.189:41774] ...
show more
(mod_security) mod_security (id:210350) triggered by 103.220.205.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:03:17.224093 2026] [security2:error] [pid 8322:tid 8322] [client 103.220.205.189:41774] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||spirits66.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spirits66.com"] [uri "/"] [unique_id "au7pVVrMeehdMH1bISfvuwAAAB4"], referer: https://route66news.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
venix
2026-10-29 11:34:09
UTC ·
(1 week ago)
Unauthorized connection attempt detected from IP address 103.220.205.189 to port 445 (web01.amsterdam)
Brute-Force
Exploited Host
🇫🇷
bigorre.org
2026-10-27 11:08:28
UTC ·
(1 week ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-24 10:51:43
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 103.220.205.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:51:27.045551 2026] [security2:error] [pid 25481:tid 25498] [client 103.220.205.189:3887 ...
show more
(mod_security) mod_security (id:210350) triggered by 103.220.205.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:51:27.045551 2026] [security2:error] [pid 25481:tid 25498] [client 103.220.205.189:38878] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cjherbalremedies.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cjherbalremedies.com"] [uri "/"] [unique_id "atyNr_OzAaTaREbpA84kQwAAAM8"], referer: https://localbizzz.com/chicago-il/acupuncture
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
KPS
2023-05-18 05:22:56
UTC ·
(3 years ago)
PortscanM
Port Scan
2023-04-28 02:22:00
UTC ·
(3 years ago)
"Illegal file type"
Brute-Force
2023-04-28 02:22:00
UTC ·
(3 years ago)
"Illegal file type"
Brute-Force
🇺🇸
RLDD
2023-04-09 18:17:36
UTC ·
(3 years ago)
WP probing for vulnerabilities -cou
Web App Attack
🇫🇷
ipfyx
2023-03-29 02:10:02
UTC ·
(3 years ago)
Port scanning
Port Scan
🇫🇷
ipfyx
2023-03-28 02:10:02
UTC ·
(3 years ago)
Port scanning
Port Scan
🇫🇷
ipfyx
2023-03-27 02:10:02
UTC ·
(3 years ago)
Port scanning
Port Scan
🇫🇷
ipfyx
2023-03-26 03:00:02
UTC ·
(3 years ago)
Port scanning
Port Scan
🇫🇷
ipfyx
2023-03-25 02:10:02
UTC ·
(3 years ago)
Port scanning
Port Scan
🇫🇷
ipfyx
2023-03-24 02:10:02
UTC ·
(3 years ago)
Port scanning
Port Scan
