🇺🇸
TPI-Abuse
2026-11-15 01:58:23
UTC ·
(10 minutes ago)
(mod_security) mod_security (id:210350) triggered by 166.88.178.128 (166-88-178-128.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:58:16.329977 2026] [security2:error] [pid 22068:tid 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 166.88.178.128 (166-88-178-128.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:58:16.329977 2026] [security2:error] [pid 22068:tid 22144] [client 166.88.178.128:40133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||howsyourlife.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howsyourlife.org"] [uri "/home/2019/03/10/thought-for-march-10th-so-keep-my-charge-never-to/"] [unique_id "avkRuOsacU4L4TJCIz5XegAAAc4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-04 00:47:59
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 05:19:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 166.88.178.128 (166-88-178-128.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:19:46.062501 2026] [security2:error] [pid 5360:tid 53 ...
show more
(mod_security) mod_security (id:210350) triggered by 166.88.178.128 (166-88-178-128.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:19:46.062501 2026] [security2:error] [pid 5360:tid 5360] [client 166.88.178.128:42765] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/01/01/tunisias-rachid-ghannouchi-on-islamic-democracy/"] [unique_id "aulu8nGIdOsq_icM4_lONwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 17:39:17
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 166.88.178.128 (166-88-178-128.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:39:11.277678 2026] [security2:error] [pid 20755:tid 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 166.88.178.128 (166-88-178-128.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:39:11.277678 2026] [security2:error] [pid 20755:tid 20755] [client 166.88.178.128:15157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.rochesterhistorical.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.rochesterhistorical.org"] [uri "/schools/"] [unique_id "auOEv94CtCzgBcodJrpVoAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 02:06:18
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 166.88.178.128 (166-88-178-128.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 22:06:13.162764 2026] [security2:error] [pid 12804:tid 1 ...
show more
(mod_security) mod_security (id:210350) triggered by 166.88.178.128 (166-88-178-128.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 22:06:13.162764 2026] [security2:error] [pid 12804:tid 12804] [client 166.88.178.128:18159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/tag/ayn-rand/"] [unique_id "at61lRz4m7Ue71TzDfD8GwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-25 06:45:01
UTC ·
(8 months ago)
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-12-11 18:25:01
UTC ·
(11 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:54
UTC ·
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
