🇺🇸
TPI-Abuse
2026-11-15 17:03:11
UTC ·
(19 minutes ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:03:03.737773 2026] [security2:error] [pid 12427:tid 12427] [client 147.78.180.58:63171] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:03:03.737773 2026] [security2:error] [pid 12427:tid 12427] [client 147.78.180.58:63171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dovka.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dovka.com"] [uri "/1/post/2025/01/back-to-the-boat.html"] [unique_id "avnlx9X1C_9ihQqxkH1zkAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-14 20:00:14
UTC ·
(21 hours ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-13 13:57:36
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:57:29.581572 2026] [security2:error] [pid 16427:tid 16449] [client 147.78.180.58:55825] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:57:29.581572 2026] [security2:error] [pid 16427:tid 16449] [client 147.78.180.58:55825] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mentzlaw.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/louisianamanganeselawsuitlawyer/"] [unique_id "avcXSaEf_5v8QTJV1vUaYgAAAUo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 12:06:51
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:06:46.243424 2026] [security2:error] [pid 755:tid 755] [client 147.78.180.58:32979] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:06:46.243424 2026] [security2:error] [pid 755:tid 755] [client 147.78.180.58:32979] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/assets/assets/js/source/helpers/js/assets/assets/js/jquery-1.9.1.min.js"] [unique_id "avb9Vvr8csivLiJ9fne15wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:31:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:31:06.440036 2026] [security2:error] [pid 15395:tid 15395] [client 147.78.180.58:27821] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:31:06.440036 2026] [security2:error] [pid 15395:tid 15395] [client 147.78.180.58:27821] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/healthcare-enrollments"] [unique_id "au_CykIZM5O2gz7cYDuCbwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 22:54:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:54:40.609107 2026] [security2:error] [pid 2060194:tid 2060214] [client 147.78.180.58:2228 ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:54:40.609107 2026] [security2:error] [pid 2060194:tid 2060214] [client 147.78.180.58:22287] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||certifiedfinancialanalyst.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certifiedfinancialanalyst.org"] [uri "/Board-Certified-Management-Consultant-Accreditation-Certification-Get-Board-Certified-Management-Consultant.html"] [unique_id "aukUsOoENrS1P_abIDa52wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 13:01:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:00:55.283586 2026] [security2:error] [pid 29391:tid 29391] [client 147.78.180.58:23675] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:00:55.283586 2026] [security2:error] [pid 29391:tid 29391] [client 147.78.180.58:23675] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rahjx.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rahjx.net"] [uri "/ktuno13.mpg"] [unique_id "auSVB5ghIKm6Pm-RCUkgYAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-30 02:27:30
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 00:21:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:21:02.335513 2026] [security2:error] [pid 29316:tid 29316] [client 147.78.180.58:10937] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:21:02.335513 2026] [security2:error] [pid 29316:tid 29316] [client 147.78.180.58:10937] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.barryschiller.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.barryschiller.com"] [uri "/theperson.htm"] [unique_id "auKRbkPliS78bC8r1LIEyQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-28 18:12:42
UTC ·
(2 weeks ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 21:43:30
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:43:21.776152 2026] [security2:error] [pid 9452:tid 9452] [client 147.78.180.58:12027] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:43:21.776152 2026] [security2:error] [pid 9452:tid 9452] [client 147.78.180.58:12027] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wholesaleglassjars.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wholesaleglassjars.com"] [uri "/blog.php"] [unique_id "auEa-VCVCBosPGFcMKLWPQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 19:38:16
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:38:08.727174 2026] [security2:error] [pid 21814:tid 21814] [client 147.78.180.58:62655] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.180.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:38:08.727174 2026] [security2:error] [pid 21814:tid 21814] [client 147.78.180.58:62655] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||scr-publications.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "scr-publications.com"] [uri "/cp_errordocument.shtml"] [unique_id "auD9oKxFRwue9HGa7xa6KAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-09-10 21:00:35
UTC ·
(2 months ago)
[hp-100] 19 unsolicited packets to honeypot ports 8000 (OCI DShield sensor)
Port Scan
🇩🇪
rh24
2026-09-08 14:41:45
UTC ·
(2 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 147.78.180.58 (RU/Russia/-)
Bad Web Bot
🇩🇪
Ilop
2026-09-03 04:00:11
UTC ·
(2 months ago)
[hp-100] 19 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)
Port Scan
