🇺🇸
TPI-Abuse
2026-11-10 01:32:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:32:41.888402 2026] [security2:error] [pid 19866:tid 19866] [client 170.168.173.40:12537] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:32:41.888402 2026] [security2:error] [pid 19866:tid 19866] [client 170.168.173.40:12537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||guardmagic.eu|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "guardmagic.eu"] [uri "/3-application/11-00-minitoring-by-application.htm"] [unique_id "avJ0OZHLsLfWBBn09gM3NQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-09 12:41:36
UTC ·
(3 days ago)
Suspicious Chrome user agent: outdated major version 134 (oldest supported 154); missing Accept-Language header; missing Sec-Fetch headers
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:23:21
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:23:18.471607 2026] [security2:error] [pid 3533:tid 3533] [client 170.168.173.40:30769] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:23:18.471607 2026] [security2:error] [pid 3533:tid 3533] [client 170.168.173.40:30769] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||charlestownmarina.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "charlestownmarina.com"] [uri "/20'71997wellcraft001.html"] [unique_id "avEuluAnXA0GCf9LVBvFGAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:30:31
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:30:23.968005 2026] [security2:error] [pid 9197:tid 9197] [client 170.168.173.40:29581] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:30:23.968005 2026] [security2:error] [pid 9197:tid 9197] [client 170.168.173.40:29581] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/aparatos/microscopioinvertidometalograficojplanoptics.html"] [unique_id "au_Cn5QDIKVQIlwggCIH_wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 02:37:17
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:37:11.771557 2026] [security2:error] [pid 11292:tid 11316] [client 170.168.173.40:32449] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:37:11.771557 2026] [security2:error] [pid 11292:tid 11316] [client 170.168.173.40:32449] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pflagabq.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pflagabq.org"] [uri "/news/2011.html"] [unique_id "au09V7ZCg8bVR5IbxzYQ8QAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:54:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:54:31.847090 2026] [security2:error] [pid 3971:tid 3971] [client 170.168.173.40:38785] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:54:31.847090 2026] [security2:error] [pid 3971:tid 3971] [client 170.168.173.40:38785] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.lasertherapyoc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.lasertherapyoc.com"] [uri "/about-vicki-dorvall/"] [unique_id "aukwx5yN1oNaDhEQFtA9iwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:18:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:18:53.613945 2026] [security2:error] [pid 32029:tid 32029] [client 170.168.173.40:20587] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:18:53.613945 2026] [security2:error] [pid 32029:tid 32029] [client 170.168.173.40:20587] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/a-tale-of-two-bostons-jeff-necessary-april-18-2011-and-april-21-2014/"] [unique_id "auWkbcKOare4866h330CUQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 08:53:39
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:53:32.428111 2026] [security2:error] [pid 17357:tid 17357] [client 170.168.173.40:57687] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:53:32.428111 2026] [security2:error] [pid 17357:tid 17357] [client 170.168.173.40:57687] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.testrong.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.testrong.com"] [uri "/forum3/index.php"] [unique_id "atxyDGcXegPKlUNqtkooQAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-05 13:36:14
UTC ·
(1 month ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
2026-10-02 20:28:18
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-10-01 19:48:27
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-09-30 19:44:36
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇨🇦
DRI
2026-07-28 08:55:48
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-25 17:52:18
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-17 21:58:21
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
