🇺🇸
TPI-Abuse
2026-11-15 06:27:36
UTC ·
(18 minutes ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:27:33.029526 2026] [security2:error] [pid 1307:tid 1307] [client 147.78.180.217:38719] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:27:33.029526 2026] [security2:error] [pid 1307:tid 1307] [client 147.78.180.217:38719] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.heathdiesel.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.heathdiesel.com"] [uri "/duramax-diesel-performance/2011-2016-lml/turbocharger-upgrades.html"] [unique_id "avlQ1Yx9aa6J9mZyWbkIogAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 21:29:28
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:29:21.269253 2026] [security2:error] [pid 881:tid 881] [client 147.78.180.217:47525] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:29:21.269253 2026] [security2:error] [pid 881:tid 881] [client 147.78.180.217:47525] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arapi.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arapi.org"] [uri "/9-best-crypto-exchanges-and-platforms-of-november/"] [unique_id "auz1MXJPgFw4YqH5Hbj9-AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-10-30 22:36:29
UTC ·
(2 weeks ago)
Repeated request on blocked xmlrpc.php.
147.78.180.217 - - [30/Oct/2026:23:36:26 +0100] "POST /xmlrpc.php HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 07:55:57
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 03:55:51.896581 2026] [security2:error] [pid 19544:tid 19544] [client 147.78.180.217:57109] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 03:55:51.896581 2026] [security2:error] [pid 19544:tid 19544] [client 147.78.180.217:57109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/50746-10-6.html"] [unique_id "auRNh0_YC25hEWYX-e1l2AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 06:05:52
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:05:47.280752 2026] [security2:error] [pid 2435:tid 2435] [client 147.78.180.217:11165] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:05:47.280752 2026] [security2:error] [pid 2435:tid 2435] [client 147.78.180.217:11165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||whengarbotalks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "whengarbotalks.com"] [uri "/album/pages/114_act1.htm"] [unique_id "auQzuwLivZtfUcYImO2x7wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 05:09:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:09:30.793463 2026] [security2:error] [pid 11958:tid 11958] [client 147.78.180.217:10811] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:09:30.793463 2026] [security2:error] [pid 11958:tid 11958] [client 147.78.180.217:10811] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vexxarr.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vexxarr.com"] [uri "/archive.php"] [unique_id "auQmin7qD6zmXDsqAn49lQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 02:34:04
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:34:01.553126 2026] [security2:error] [pid 3381:tid 3381] [client 147.78.180.217:18605] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:34:01.553126 2026] [security2:error] [pid 3381:tid 3381] [client 147.78.180.217:18605] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/karthago.html"] [unique_id "auQCGYj28p-SSD2Gw9zLEQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 18:08:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:08:35.704391 2026] [security2:error] [pid 14446:tid 14513] [client 147.78.180.217:43757] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:08:35.704391 2026] [security2:error] [pid 14446:tid 14513] [client 147.78.180.217:43757] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||catslife.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "catslife.net"] [uri "/raw-food-diet-for-cats"] [unique_id "auI6I5JXfWVumtWO-CcvsgAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-11 04:49:47
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 147.78.180.217
2026-09-11T06:03:42+02:00 vpn Access-Reject 'Lim' station: 147.78.180.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 147.78.180.217
2026-09-11T06:03:42+02:00 vpn Access-Reject 'Lim' station: 147.78.180.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
COMPLEX
2025-11-29 03:58:30
UTC ·
(11 months ago)
Triggered Cloudflare WAF (l7ddos) from US.
Action taken: BLOCK
ASN: 26548 (PUREVOLTAGE-INC)
Protocol: HTTP/2 (GET method)
Endpoint: /
DDoS Attack
Bad Web Bot
🇪🇸
10dencehispahard SL
2025-11-12 06:31:11
UTC ·
(1 year ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇷🇺
sms.ru
2024-09-27 00:35:03
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇬🇧
essinghigh
2024-07-27 05:49:44
UTC ·
(2 years ago)
1722059384 # Service_probe # SIGNATURE_SEND # source_ip:147.78.180.217 # dst_port:60000
...
Port Scan
🇺🇸
VSM Networks
2024-02-29 08:18:56
UTC ·
(2 years ago)
Credential Stuffing
Brute-Force
