🇺🇸
TPI-Abuse
2026-11-11 17:09:26
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:09:21.553375 2026] [security2:error] [pid 24421:tid 24436] [client 104.245.240.171:2885 ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:09:21.553375 2026] [security2:error] [pid 24421:tid 24436] [client 104.245.240.171:28851] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/vnonalternatinge3831769"] [unique_id "avShQaelOjIrG90ZXscXMgAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 10:15:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 06:15:40.827471 2026] [security2:error] [pid 18568:tid 18568] [client 104.245.240.171:1854 ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 06:15:40.827471 2026] [security2:error] [pid 18568:tid 18568] [client 104.245.240.171:18547] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2019/03/12/march-12-2019-arsenal-for-democracy-ep-262/"] [unique_id "auW_zCOCrlCHDTltZGScHQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 00:52:14
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:52:07.148173 2026] [security2:error] [pid 31787:tid 31787] [client 104.245.240.171:4213 ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:52:07.148173 2026] [security2:error] [pid 31787:tid 31787] [client 104.245.240.171:42135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.normteslaa.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.normteslaa.com"] [uri "/contact-me.html"] [unique_id "auPqN558cZ6S5ugVZCQYMgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 23:41:59
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:41:53.351706 2026] [security2:error] [pid 2040:tid 2040] [client 104.245.240.171:47115] ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:41:53.351706 2026] [security2:error] [pid 2040:tid 2040] [client 104.245.240.171:47115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bluegrassexpressband.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bluegrassexpressband.com"] [uri "/merchandise.once_in_a_lifetime_thing.html"] [unique_id "auKIQYzKi3vtPinz6VVJvwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 08:40:51
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 04:40:43.074236 2026] [security2:error] [pid 1312691:tid 1312747] [client 104.245.240.171: ...
show more
(mod_security) mod_security (id:210730) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 04:40:43.074236 2026] [security2:error] [pid 1312691:tid 1312747] [client 104.245.240.171:19005] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||montanatribes.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "montanatribes.org"] [uri "/on.sql"] [unique_id "anGli3sCNVWJjUEJUQXWuAAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 22:40:36
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 18:40:31.746298 2026] [security2:error] [pid 32520:tid 32520] [client 104.245.240.171:1795 ...
show more
(mod_security) mod_security (id:210730) triggered by 104.245.240.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 18:40:31.746298 2026] [security2:error] [pid 32520:tid 32520] [client 104.245.240.171:17951] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||n3fjp.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "n3fjp.com"] [uri "/2023.sql"] [unique_id "amPp35wqmzL29YSVIyovkgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-14 07:07:15
UTC ·
(6 months ago)
"GET /wp-login.php HTTP/1.1"
Hacking
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-04 12:13:25
UTC ·
(10 months ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-25 15:04:49
UTC ·
(10 months ago)
WP Login Scan Activities
Web App Attack
2025-03-07 04:19:07
UTC ·
(1 year ago)
Automated report of SMTP spam activity
Email Spam
SQL Injection
Brute-Force
