🇺🇸
TPI-Abuse
2026-11-11 18:35:13
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:35:06.645952 2026] [security2:error] [pid 14937:tid 14937] [client 146.19.39.55:54569] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:35:06.645952 2026] [security2:error] [pid 14937:tid 14937] [client 146.19.39.55:54569] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.rochesterhistorical.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.rochesterhistorical.org"] [uri "/churches/"] [unique_id "avS1Wjh3wRy9Z-x_5P_xxgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 06:47:10
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:47:03.437070 2026] [security2:error] [pid 28332:tid 28332] [client 146.19.39.55:9271] ModS ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:47:03.437070 2026] [security2:error] [pid 28332:tid 28332] [client 146.19.39.55:9271] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/2017/02/"] [unique_id "avK950DC6eOKhcmZI10hcQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 01:19:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:18:59.794469 2026] [security2:error] [pid 22689:tid 22689] [client 146.19.39.55:40493] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:18:59.794469 2026] [security2:error] [pid 22689:tid 22689] [client 146.19.39.55:40493] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||frightlibrary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "frightlibrary.org"] [uri "/lib/dguest.htm"] [unique_id "auqIAxb8-s2K3SbPVEXs_wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 23:28:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:28:08.020118 2026] [security2:error] [pid 20537:tid 20543] [client 146.19.39.55:17725] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:28:08.020118 2026] [security2:error] [pid 20537:tid 20543] [client 146.19.39.55:17725] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fishrapper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishrapper.com"] [uri "/fishing-report-winnibigoshish-2021.html"] [unique_id "aupuCALFHS6XdZPSvygJRwAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 03:06:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:06:20.151718 2026] [security2:error] [pid 6173:tid 6173] [client 146.19.39.55:57147] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:06:20.151718 2026] [security2:error] [pid 6173:tid 6173] [client 146.19.39.55:57147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/ed-miliband/"] [unique_id "aulPrFSkKwQCd1EeWAYyYQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-03 20:42:00
UTC ·
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-02 22:39:51
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 18:39:42.264762 2026] [security2:error] [pid 27501:tid 27501] [client 146.19.39.55:23447] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 18:39:42.264762 2026] [security2:error] [pid 27501:tid 27501] [client 146.19.39.55:23447] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lsippell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lsippell.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apilrlO4Iv4kNyHi-Aak2gAAADw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
SilverZippo
2026-09-01 19:05:52
UTC ·
(2 months ago)
Web App Attack
Web App Attack
2026-08-31 20:11:21
UTC ·
(2 months ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 15:31:51
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:31:43.783019 2026] [security2:error] [pid 21342:tid 21342] [client 146.19.39.55:30871] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:31:43.783019 2026] [security2:error] [pid 21342:tid 21342] [client 146.19.39.55:30871] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ccoxes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ccoxes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aosSX8m7cQS66KCPP1sELwAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
georgengelmann
2026-08-22 10:59:41
UTC ·
(2 months ago)
Failed login attempt for admin
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 20:52:40
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 16:52:34.345572 2026] [security2:error] [pid 12254:tid 12254] [client 146.19.39.55:44193] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 16:52:34.345572 2026] [security2:error] [pid 12254:tid 12254] [client 146.19.39.55:44193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tanny.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tanny.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoTGEt9TBo7-_ZSeRELBfQAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-08-05 01:07:20
UTC ·
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-08-03 23:34:39
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 19:34:32.858580 2026] [security2:error] [pid 2031158:tid 2031158] [client 146.19.39.55:14227] ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 19:34:32.858580 2026] [security2:error] [pid 2031158:tid 2031158] [client 146.19.39.55:14227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donnysimonton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donnysimonton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anEliPOBL4Y5Rs6Kb70TOgAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 15:43:04
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 11:43:00.855312 2026] [security2:error] [pid 9168:tid 9168] [client 146.19.39.55:44619] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.39.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 11:43:00.855312 2026] [security2:error] [pid 9168:tid 9168] [client 146.19.39.55:44619] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||extreme-atv.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "extreme-atv.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alJkhF7FF3CjKhf-EZ8YJwAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
