🇺🇸
TPI-Abuse
2026-11-14 14:44:32
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:44:25.055131 2026] [security2:error] [pid 24766:tid 24766] [client 170.168.98.12:52623] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:44:25.055131 2026] [security2:error] [pid 24766:tid 24766] [client 170.168.98.12:52623] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/mobiliario/021b07967b09d262f.html"] [unique_id "avhzyVLrbcbabsUEnmxMtAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 11:29:46
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:29:42.079518 2026] [security2:error] [pid 14686:tid 14686] [client 170.168.98.12:29841] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:29:42.079518 2026] [security2:error] [pid 14686:tid 14686] [client 170.168.98.12:29841] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.watonga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.watonga.com"] [uri "/biblebios/lot/singletreff-winterberg/"] [unique_id "avhGJht_j4M14h3iWNnnfwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-12 04:00:14
UTC ·
(2 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-11 05:02:35
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:02:30.932058 2026] [security2:error] [pid 8305:tid 8305] [client 170.168.98.12:28063] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:02:30.932058 2026] [security2:error] [pid 8305:tid 8305] [client 170.168.98.12:28063] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jessicalevant.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jessicalevant.com"] [uri "/port-chicago-suite/"] [unique_id "avP25qR1MFXSZrjzutoqNwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 08:31:59
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:31:54.758774 2026] [security2:error] [pid 16409:tid 16409] [client 170.168.98.12:63067] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:31:54.758774 2026] [security2:error] [pid 16409:tid 16409] [client 170.168.98.12:63067] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kentweakley.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kentweakley.com"] [uri "/blog/"] [unique_id "au2QevYZ2MVK-GocrtcJNwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 08:09:05
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:08:59.602403 2026] [security2:error] [pid 17021:tid 17021] [client 170.168.98.12:55683] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.98.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:08:59.602403 2026] [security2:error] [pid 17021:tid 17021] [client 170.168.98.12:55683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.endriss.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.endriss.info"] [uri "/"] [unique_id "auRQm4BaeikF91vAYx9cZwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
