🇺🇸
TPI-Abuse
2026-11-11 07:29:47
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 02:29:29.697893 2026] [security2:error] [pid 29396:tid 29396] [client 104.245.243.252:2268 ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 02:29:29.697893 2026] [security2:error] [pid 29396:tid 29396] [client 104.245.243.252:22687] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.centuryabsinthe.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.centuryabsinthe.com"] [uri "/"] [unique_id "avQZWcxzN7wu0P5P_bXVZgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:42:54
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:42:37.303882 2026] [security2:error] [pid 14615:tid 14625] [client 104.245.243.252:2765 ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:42:37.303882 2026] [security2:error] [pid 14615:tid 14625] [client 104.245.243.252:27651] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ilenefletcher.com.richardleeweatherman.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ilenefletcher.com.richardleeweatherman.com"] [uri "/20[0~1:3]9399.htm"] [unique_id "avGxrVer5Cpvzo7LRfqxBAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
sssrit
2026-11-08 06:46:36
UTC ·
(4 days ago)
104.245.243.252 - - [08/Nov/2026:07:46:35 +0100] "GET /nuovo-digitale-terrestre-da-oggi-20-ottobre-cambiano-le-frequenze-come-continuare-a-vedere-i-canali-tv/ HTTP/1.1" 404 16883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 ...
show more
104.245.243.252 - - [08/Nov/2026:07:46:35 +0100] "GET /nuovo-digitale-terrestre-da-oggi-20-ottobre-cambiano-le-frequenze-come-continuare-a-vedere-i-canali-tv/ HTTP/1.1" 404 16883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 00:31:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:31:24.358878 2026] [security2:error] [pid 26676:tid 26676] [client 104.245.243.252:1294 ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:31:24.358878 2026] [security2:error] [pid 26676:tid 26676] [client 104.245.243.252:12947] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/tag/Big Data"] [unique_id "auPlXKgs7DZ9REUvYb71lQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:34:15
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:34:00.435900 2026] [security2:error] [pid 17788:tid 17788] [client 104.245.243.252:6458 ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:34:00.435900 2026] [security2:error] [pid 17788:tid 17788] [client 104.245.243.252:64587] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fredlandia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fredlandia.com"] [uri "/downtown-frederick/the-blizzard-of-2016/"] [unique_id "auJqSPn86CEdgY1r_4iHHAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 23:17:47
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:17:33.966702 2026] [security2:error] [pid 1538:tid 1538] [client 104.245.243.252:42463] ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:17:33.966702 2026] [security2:error] [pid 1538:tid 1538] [client 104.245.243.252:42463] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.uppermotradingco.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.uppermotradingco.com"] [uri "/"] [unique_id "atQCDcQ2Z75zj-f0cQAQtwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
Saec
2026-07-03 00:15:18
UTC ·
(4 months ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)
Port Scan
Web App Attack
🇩🇪
ghostwarriors
2026-05-12 09:51:50
UTC ·
(6 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-05-06 13:51:30
UTC ·
(6 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-02-24 18:28:20
UTC ·
(8 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇨🇭
backslash
2026-02-05 18:20:03
UTC ·
(9 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
