🇺🇸
TPI-Abuse
2026-11-14 12:03:17
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:03:11.197736 2026] [security2:error] [pid 12732:tid 12732] [client 146.19.91.251:14425] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:03:11.197736 2026] [security2:error] [pid 12732:tid 12732] [client 146.19.91.251:14425] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/instrumental/sondasderuedaaladaseriehddeltaohm.html"] [unique_id "avhN_zWagUxifiSVO6DzaAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:48:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:48:32.244678 2026] [security2:error] [pid 25828:tid 25918] [client 146.19.91.251:16965] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:48:32.244678 2026] [security2:error] [pid 25828:tid 25918] [client 146.19.91.251:16965] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.americanacademyofprojectmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.americanacademyofprojectmanagement.com"] [uri "/courseoutlines.html"] [unique_id "avgucD1iNuCkH9d3r5auEQAAAcA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 17:36:49
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:36:43.150720 2026] [security2:error] [pid 2668:tid 2668] [client 146.19.91.251:21473] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:36:43.150720 2026] [security2:error] [pid 2668:tid 2668] [client 146.19.91.251:21473] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.turtlehill.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.turtlehill.org"] [uri "/bsf/bsfc.html"] [unique_id "avX5KxlB_g1hjUY3ahm8YQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-11-11 15:35:45
UTC ·
(4 days ago)
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-10 15:33:55
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:33:47.979767 2026] [security2:error] [pid 16000:tid 16000] [client 146.19.91.251:58205] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:33:47.979767 2026] [security2:error] [pid 16000:tid 16000] [client 146.19.91.251:58205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/07/03/us-suspends-big-security-aid-programs-in-burundi/"] [unique_id "avM5Wz3OtpecMBQrJLZ1rAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:46:27
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:46:23.613210 2026] [security2:error] [pid 28753:tid 28753] [client 146.19.91.251:10451] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:46:23.613210 2026] [security2:error] [pid 28753:tid 28753] [client 146.19.91.251:10451] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||charlestownmarina.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "charlestownmarina.com"] [uri "/26'82012crownline001.html"] [unique_id "avGIX7rjMFmdMgLNBdx1jgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-11-07 20:21:03
UTC ·
(1 week ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-03 08:57:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:57:41.097352 2026] [security2:error] [pid 13982:tid 13982] [client 146.19.91.251:18515] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:57:41.097352 2026] [security2:error] [pid 13982:tid 13982] [client 146.19.91.251:18515] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cchockeyhistory.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cchockeyhistory.org"] [uri "/Timeline/2005.htm"] [unique_id "aumiBe-HA2PHghK8zSIlpwAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 02:40:13
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 22:40:04.953651 2026] [security2:error] [pid 13656:tid 13656] [client 146.19.91.251:28379] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 22:40:04.953651 2026] [security2:error] [pid 13656:tid 13656] [client 146.19.91.251:28379] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/2013/09/03/2013-book-39-the-book-thief/"] [unique_id "at69hMG4wdaERQITe12-KgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
true.nl
2022-06-24 11:57:00
UTC ·
(4 years ago)
IP participated in a http flood ddos attack against 87.233.198.20
DDoS Attack
