🇺🇸
TPI-Abuse
2026-11-14 23:28:11
UTC ·
(8 minutes ago)
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:28:04.945817 2026] [security2:error] [pid 22644:tid 22644] [client 147.78.183.174:34427] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:28:04.945817 2026] [security2:error] [pid 22644:tid 22644] [client 147.78.183.174:34427] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "avjuhJNakbHioXnFy5NbzwAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 18:22:19
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:22:12.292494 2026] [security2:error] [pid 30004:tid 30004] [client 147.78.183.174:42609] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:22:12.292494 2026] [security2:error] [pid 30004:tid 30004] [client 147.78.183.174:42609] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/01/25/tunisia-still-setting-regional-example/"] [unique_id "avSyVF-r52fzaaxujKwu_QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 19:36:30
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:36:27.525056 2026] [security2:error] [pid 19643:tid 19643] [client 147.78.183.174:27521] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:36:27.525056 2026] [security2:error] [pid 19643:tid 19643] [client 147.78.183.174:27521] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/at-mile-23-come-on-stay-strong-just-a-little-longer-anita-harless-april-15-2013/"] [unique_id "auzauwgMcK5vpXIYaexhKAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 18:01:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 13:01:08.545522 2026] [security2:error] [pid 2339140:tid 2339161] [client 147.78.183.174:32 ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 13:01:08.545522 2026] [security2:error] [pid 2339140:tid 2339161] [client 147.78.183.174:32893] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.killasgarage.bike|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.killasgarage.bike"] [uri "/uncategorized/ocd-handlebar-and-saddle-alignment/"] [unique_id "auty5EvSFTUqLmVhHmHz4wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
abivia
2026-11-03 20:52:57
UTC ·
(1 week ago)
Abivia WAF trigger: Rule scriptKiddies: Probing for vulnerabilities uri: /nextrelease/index.php?%2Farchives%2F5-Digital-Rights-Management-DRM-is-a-Waste-of-Time.html=
Hacking
🇺🇸
TPI-Abuse
2026-10-31 12:46:02
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:45:54.673912 2026] [security2:error] [pid 28051:tid 28051] [client 147.78.183.174:42995] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:45:54.673912 2026] [security2:error] [pid 28051:tid 28051] [client 147.78.183.174:42995] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/new-the-deadly-sins-of-incentive-comp"] [unique_id "auXjAnRYlGegY7BmM0NQuwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 17:08:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:08:45.646076 2026] [security2:error] [pid 18589:tid 18589] [client 147.78.183.174:32703] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:08:45.646076 2026] [security2:error] [pid 18589:tid 18589] [client 147.78.183.174:32703] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mightyhoop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mightyhoop.com"] [uri "/"] [unique_id "auN9nXD4FYCz1ORkDjewlgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 23:59:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:59:18.832921 2026] [security2:error] [pid 8962:tid 8979] [client 147.78.183.174:45569] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.183.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:59:18.832921 2026] [security2:error] [pid 8962:tid 8979] [client 147.78.183.174:45569] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntmfnewsrahman5.html"] [unique_id "atqjVpjeAIxxJE-GWlJreQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-05 07:24:44
UTC ·
(1 month ago)
Try to access /xmlrpc.php
Web App Attack
🇨🇿
lp
2025-03-21 23:50:09
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 147.78.183.174
2025-03-22T00:34:36+01:00 vpn Access-Reject 'oxford' station: 147.78.183.174 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 147.78.183.174
2025-03-22T00:34:36+01:00 vpn Access-Reject 'oxford' station: 147.78.183.174 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2025-03-09 19:22:09
UTC ·
(1 year ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
2024-08-20 04:27:40
UTC ·
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-08-18 17:00:47
UTC ·
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇭
backslash
2023-07-21 08:09:21
UTC ·
(3 years ago)
Web App Attack
🇬🇧
Keratin
2023-05-18 08:56:44
UTC ·
(3 years ago)
Possible web app exploitation
Brute-Force
Web App Attack
