🇺🇸
TPI-Abuse
2026-11-08 03:52:00
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:51:52.961745 2026] [security2:error] [pid 4508:tid 4508] [client 140.235.170.186:17691] ...
show more
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:51:52.961745 2026] [security2:error] [pid 4508:tid 4508] [client 140.235.170.186:17691] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.themadwriter.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.themadwriter.us"] [uri "/success-story-a-child-can-do-it-33.htm"] [unique_id "au_x2JiA0QrswJ-VJ2ScPAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 08:24:04
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:23:59.949493 2026] [security2:error] [pid 10751:tid 10751] [client 140.235.170.186:3052 ...
show more
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:23:59.949493 2026] [security2:error] [pid 10751:tid 10751] [client 140.235.170.186:30529] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chassell.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chassell.info"] [uri "/Bike/bicycle_around_lake_superior_Day_18.htm"] [unique_id "aumaH8TpH1UqKveQGmnMwQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 07:44:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:44:12.752095 2026] [security2:error] [pid 28580:tid 28580] [client 140.235.170.186:4377 ...
show more
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:44:12.752095 2026] [security2:error] [pid 28580:tid 28580] [client 140.235.170.186:43777] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "aumQzNWVqyqOC6Ja1fx2uQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 22:24:49
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:24:44.753492 2026] [security2:error] [pid 6872:tid 6894] [client 140.235.170.186:58661] ...
show more
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:24:44.753492 2026] [security2:error] [pid 6872:tid 6894] [client 140.235.170.186:58661] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntmfnewsiraq52.html"] [unique_id "atk7rEjRyPh0s1Vw_LgefgAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 20:13:41
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:13:35.697277 2026] [security2:error] [pid 870:tid 870] [client 140.235.170.186:25249] M ...
show more
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:13:35.697277 2026] [security2:error] [pid 870:tid 870] [client 140.235.170.186:25249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.akronpartybuses.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.akronpartybuses.com"] [uri "/"] [unique_id "atKFb00cmIWogMtDZmJlDQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:24:23
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:24:15.648725 2026] [security2:error] [pid 10519:tid 10530] [client 140.235.170.186:1295 ...
show more
(mod_security) mod_security (id:210350) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:24:15.648725 2026] [security2:error] [pid 10519:tid 10530] [client 140.235.170.186:12951] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||writeonce.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "writeonce.org"] [uri "/Flare_To_Word.php"] [unique_id "atDT_13I820EDp4dXUgFqgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2026-09-09 09:56:52
UTC ·
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇫🇮
JimArchon72
2026-08-12 14:15:02
UTC ·
(3 months ago)
2026/08/12 14:12:46 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇫🇮
JimArchon72
2026-07-25 07:40:02
UTC ·
(3 months ago)
2026/07/25 07:39:42 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇺🇸
mnsf
2026-06-19 18:05:53
UTC ·
(4 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 18:23:46
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 14:23:39.966785 2026] [security2:error] [pid 13414:tid 13414] [client 140.235.170.186:1180 ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.170.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 14:23:39.966785 2026] [security2:error] [pid 13414:tid 13414] [client 140.235.170.186:11809] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||davidbine.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "davidbine.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aimrq-yz4Prj-23uH9QLbgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oncord
2026-01-10 16:27:08
UTC ·
(10 months ago)
Form spam
Web Spam
🇺🇸
oncord
2026-01-09 09:05:09
UTC ·
(10 months ago)
Form spam
Web Spam
2026-01-04 21:42:17
UTC ·
(10 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2026-01-02 21:14:47
UTC ·
(10 months ago)
IM360 WAF: Attempt to upload malware
Hacking
