This IP address has been reported a total of
3
times from
1 distinct
source.
176.229.241.132 was first reported on
September 16th 2026 , and the most recent report was
23 hours ago United States of America
with 3
reports.
The most common categories in these recent reports were:
Bad Web Bot
3
times;
Brute-Force
3
times;
Web App Attack
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-28 17:58:35
(23 hours ago)
(mod_security) mod_security (id:210350) triggered by 176.229.241.132 (176-229-241-132.orange.net.il) ...
show more
(mod_security) mod_security (id:210350) triggered by 176.229.241.132 (176-229-241-132.orange.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 13:58:27.615490 2026] [security2:error] [pid 16985:tid 16985] [client 176.229.241.132:57548] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pointandshootfilm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pointandshootfilm.com"] [uri "/"] [unique_id "arqqw6z9Xx-uufP422rPMAAAAAU"], referer: https://bestdapachecker.online/dir/seo-outreach-backlinks-164258
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 13:27:35
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 176.229.241.132 (176-229-241-132.orange.net.il) ...
show more
(mod_security) mod_security (id:210350) triggered by 176.229.241.132 (176-229-241-132.orange.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:27:30.939074 2026] [security2:error] [pid 10557:tid 10557] [client 176.229.241.132:38900] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alrightletsgo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alrightletsgo.com"] [uri "/"] [unique_id "aq08Qo4D7Jo636xavsCidwAAAAI"], referer: https://onlinedachecker.online/dir/expert-link-building-services-7653
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 10:45:15
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 176.229.241.132 (176-229-241-132.orange.net.il) ...
show more
(mod_security) mod_security (id:210350) triggered by 176.229.241.132 (176-229-241-132.orange.net.il): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:45:09.204313 2026] [security2:error] [pid 17661:tid 17661] [client 176.229.241.132:60930] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||denvercitymotorparts.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "denvercitymotorparts.com"] [uri "/"] [unique_id "aqpzNQhGuF7VF6irmwcFWQAAAAQ"], referer: https://five.co.in/redirect.php?ref_host=kulturamexus.cz
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
3
of 3 reports
