🇺🇸
TPI-Abuse
2026-11-06 18:06:27
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:06:19.607182 2026] [security2:error] [pid 6314:tid 6314] [client 146.19.91.49:22401] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:06:19.607182 2026] [security2:error] [pid 6314:tid 6314] [client 146.19.91.49:22401] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/a-boston-marathon-to-remember-barry-scanlon-april-21-2014/"] [unique_id "au4XGzw3iNoB44Ah8o4uhAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-04 01:25:02
UTC ·
(3 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 16:51:15
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:51:06.393506 2026] [security2:error] [pid 702:tid 702] [client 146.19.91.49:37977] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:51:06.393506 2026] [security2:error] [pid 702:tid 702] [client 146.19.91.49:37977] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cynthiabaxter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cynthiabaxter.com"] [uri "/"] [unique_id "auoQ-icR6VrSDJLVOMPWtgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 19:02:46
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 146.19.91.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:02:40.483690 2026] [security2:error] [pid 24846:tid 24846] [client 146.19.91.49:48129] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.91.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:02:40.483690 2026] [security2:error] [pid 24846:tid 24846] [client 146.19.91.49:48129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alexgitlin.com"] [uri "/fox.html"] [unique_id "aueM0PvxMoijiMka0KYDKgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-20 17:00:36
UTC ·
(1 month ago)
[ti-01sc] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 146.19.91.49 - - [20/Sep/2026:18:59:49 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb ...
show more
[ti-01sc] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 146.19.91.49 - - [20/Sep/2026:18:59:49 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
146.19.91.49 - - [20/Sep/2026:19:00:06 +0200] "POST /wp-login.php HTTP/2.0" 200 4487 "https://www.nieuwsvoordietisten.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
146.19.91.49 - - [20/Sep/2026:19:00:11 +0200] "POST /xmlrpc.php HTTP/2.0" 403 87 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
146.19.91.49 - - [20/Sep/2026:19:00:28
...
show less
Brute-Force
Web App Attack
🇩🇪
FD-IX
2026-09-16 08:00:50
UTC ·
(1 month ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
🇩🇪
4server
2026-04-23 06:13:49
UTC ·
(6 months ago)
[ThuApr2308:13:43.7289742026][security2:error][pid1555060:tid1555080][client146.19.91.49:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[ThuApr2308:13:43.7289742026][security2:error][pid1555060:tid1555080][client146.19.91.49:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ldrtrade.eu\"][uri\"/\"][unique_id\"aem4lzrukZUnZx_RCc79FwAAAEk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
masterguru
2025-12-11 05:02:44
UTC ·
(10 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 146.19.91.49 (RU/Russia/-): 1 in the last 3600 secs (0-196)
Hacking
🇵🇱
rafix
2023-10-28 10:04:25
UTC ·
(3 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
