181.91.86.42

(mod_security) mod_security (id:210350) triggered by 181.91.86.42 (181.91.86.42.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:55:12.691005 2026] [security2:error] [pid 1373:tid 1373] [c ... show more (mod_security) mod_security (id:210350) triggered by 181.91.86.42 (181.91.86.42.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:55:12.691005 2026] [security2:error] [pid 1373:tid 1373] [client 181.91.86.42:7000] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ea2cdy.es|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ea2cdy.es"] [uri "/dimension-4.html"] [unique_id "au4ikPKlh8nwn6xHFasw1wAAABQ"], referer: https://ea2cdy.es/potencia-en-emision.html show less

(mod_security) mod_security (id:210350) triggered by 181.91.86.42 (181.91.86.42.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 15:53:52.581476 2026] [security2:error] [pid 19935:tid 19987] ... show more (mod_security) mod_security (id:210350) triggered by 181.91.86.42 (181.91.86.42.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 15:53:52.581476 2026] [security2:error] [pid 19935:tid 19987] [client 181.91.86.42:31208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aafm.us|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aafm.us"] [uri "/"] [unique_id "at-v0CBLflNh4r05eybY_QAAAZE"], referer: https://oxfordlawschool.com/ show less

(mod_security) mod_security (id:210350) triggered by 181.91.86.42 (181.91.86.42.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:31:40.661707 2026] [security2:error] [pid 19041:tid 19041] ... show more (mod_security) mod_security (id:210350) triggered by 181.91.86.42 (181.91.86.42.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:31:40.661707 2026] [security2:error] [pid 19041:tid 19041] [client 181.91.86.42:27877] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||beachweddinginvites.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "beachweddinginvites.com"] [uri "/"] [unique_id "at9yXJnloFarFZuFWE8GkgAAABk"], referer: https://five.co.in/redirect.php?ref_host=americanfamilyrevival.com show less

(mod_security) mod_security (id:210350) triggered by 181.91.86.42 (181.91.86.42.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:04:37.304255 2026] [security2:error] [pid 980:tid 980] [cli ... show more (mod_security) mod_security (id:210350) triggered by 181.91.86.42 (181.91.86.42.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:04:37.304255 2026] [security2:error] [pid 980:tid 980] [client 181.91.86.42:16888] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rddeckerphotography.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rddeckerphotography.com"] [uri "/blog"] [unique_id "at5EteizsPraiCXwQWlBAwAAAAY"], referer: https://melissadunstan.blogspot.com/2009/03 show less

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0

ELEVATED_THREAT | 487 IPs targeting /brand.html | URL template shared by 183 IPs: /brand.html?bulb_shape_type=*&bulb_shape=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.82, unique_ips=1010)

Web bot: denial-of-service flood

2026-07-12T11:13:07 181.91.86.42 GET /Photos/Outdoors/2011-07-31%20Berkeley%20Kite%20Festival/raw/IMG_0856.CR2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/78.0.3904.97 Safari/537.36 ...

Fail2ban picked up 181.91.86.42 attacking nginx

Fail2ban picked up 181.91.86.42 attacking nginx

Fail2ban picked up 181.91.86.42 attacking nginx

Fail2ban picked up 181.91.86.42 attacking nginx