🇺🇸
TPI-Abuse
2026-11-15 15:32:05
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:32:00.810791 2026] [security2:error] [pid 4201:tid 4201] [client 170.168.29.94:36117] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 10:32:00.810791 2026] [security2:error] [pid 4201:tid 4201] [client 170.168.29.94:36117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.spacebooger.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.spacebooger.com"] [uri "/wp-content/plugins/blog-sidebar-widget/public/js/fontawesome/v4-shims.min.js"] [unique_id "avnQcBSsgGL26Rts2GCgzAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 11:25:47
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:25:44.567813 2026] [security2:error] [pid 9488:tid 9488] [client 170.168.29.94:46447] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:25:44.567813 2026] [security2:error] [pid 9488:tid 9488] [client 170.168.29.94:46447] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kentweakley.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kentweakley.com"] [uri "/blog/p52-sweet-shot-tuesday-week-24-2/"] [unique_id "avmWuGDksHLsloeNzFq0VAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 12:51:09
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:51:02.535803 2026] [security2:error] [pid 26461:tid 26461] [client 170.168.29.94:25213] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:51:02.535803 2026] [security2:error] [pid 26461:tid 26461] [client 170.168.29.94:25213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "avhZNmcLmQQ4424Enic8FwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:46:18
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:46:12.417477 2026] [security2:error] [pid 5000:tid 5029] [client 170.168.29.94:61165] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:46:12.417477 2026] [security2:error] [pid 5000:tid 5029] [client 170.168.29.94:61165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||howardhallis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howardhallis.com"] [uri "/doctorstrange/posters/postersA/files/res/Languages"] [unique_id "avYJdA4EgPGR7aL2m7T-ZQAAAhU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
NewGastroline
2026-11-11 20:43:37
UTC ·
(3 days ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
2026-11-07 07:53:56
UTC ·
(1 week ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
2026-11-05 15:04:13
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-30 20:29:22
UTC ·
(2 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 01:25:15
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:25:09.786069 2026] [security2:error] [pid 21969:tid 21969] [client 170.168.29.94:60215] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:25:09.786069 2026] [security2:error] [pid 21969:tid 21969] [client 170.168.29.94:60215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||john-bell-associates.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "john-bell-associates.com"] [uri "/3p/3pholenm.htm"] [unique_id "auPx9VK1JtKp1n8hYQM7RAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 02:19:51
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 22:19:46.699428 2026] [security2:error] [pid 30955:tid 30955] [client 170.168.29.94:21065] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 22:19:46.699428 2026] [security2:error] [pid 30955:tid 30955] [client 170.168.29.94:21065] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.r-390a.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.r-390a.net"] [uri "/faq-tubes.htm"] [unique_id "auFbwnSRdSM6-ttEVz70zgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-28 01:14:23
UTC ·
(2 weeks ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-10-25 05:47:47
UTC ·
(3 weeks ago)
Brute force
Brute-Force
2026-10-23 18:46:14
UTC ·
(3 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 00:20:07
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:20:00.766209 2026] [security2:error] [pid 18044:tid 18044] [client 170.168.29.94:21315] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.29.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:20:00.766209 2026] [security2:error] [pid 18044:tid 18044] [client 170.168.29.94:21315] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/107-92-6.html"] [unique_id "atgFMBXu5qVNhK4qN5LZ8QAAAHQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-20 05:34:51
UTC ·
(3 weeks ago)
Brute force
Brute-Force
