🇺🇸
TPI-Abuse
2026-10-27 01:52:26
(17 hours ago)
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 21:52:18.071934 2026] [security2:error] [pid 6778:tid 6778] [client 190.142.102.69:50978] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||greenlight.us|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "greenlight.us"] [uri "/"] [unique_id "auAD0rty042MH98d1CSEwQAAAAw"], referer: https://five.co.in/redirect.php?ref_host=ti4it.com.br
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-26 21:57:03
(21 hours ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
🇸🇬
mypatricks
2026-10-26 08:55:23
(1 day ago)
190.142.102.69 | Port: 11664 | DNS: 190.142.102.69 2026-10-26T16:55:22+08:00 America/Caracas | IPs S ...
show more
190.142.102.69 | Port: 11664 | DNS: 190.142.102.69 2026-10-26T16:55:22+08:00 America/Caracas | IPs Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /tag/%E7%8B%AC%E8%A7%92%E5%85%BD/Home-Delivery-Cake-Shop?a9b1147bb11f48fe395a0944134=JPY&code=JPY | Ref: - | Country: VE/Venezuela/−04:00 IP City: Barcelona Windows a5083dda7e002b27-MIA/Miami, FL, United States 1 hits/0 secs Browser 3
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇺🇸
TPI-Abuse
2026-10-23 21:58:06
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:58:01.181739 2026] [security2:error] [pid 25807:tid 25807] [client 190.142.102.69:52012] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||grancanariaholidays.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "grancanariaholidays.com"] [uri "/"] [unique_id "atvYadRcTEoPj8NKQ9BFVwAAAA0"], referer: https://acquire.co.in/redirect.php?ref_host=sumengtrade.net
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-20 01:31:24
(1 week ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=67&topics%5B1%5D=56&topics%5B2%5D=29&topics%5B3%5D=70 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-07 20:15:53
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 16:15:48.414774 2026] [security2:error] [pid 5862:tid 5862] [client 190.142.102.69:36778] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||andamiospime.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "andamiospime.com"] [uri "/"] [unique_id "asaodDcJcqUQpe7qn_KLKwAAABg"], referer: https://backlinkautomation.space/dir/ethical-link-building-services-9492
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-03 02:14:58
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 22:14:54.213335 2026] [security2:error] [pid 21457:tid 21457] [client 190.142.102.69:60598] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bryjer.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bryjer.com"] [uri "/"] [unique_id "asBlHv-_h_6KMC-ADwBp5gAAABQ"], referer: https://cheapbacklinkservice.store/dir/backlinks-for-ranking-29912
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
KPS
2026-10-02 20:27:25
(3 weeks ago)
PortscanM
Port Scan
🇺🇸
TPI-Abuse
2026-09-30 09:02:31
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 05:02:23.073452 2026] [security2:error] [pid 22744:tid 22744] [client 190.142.102.69:51116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.proprocessor.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.proprocessor.com"] [uri "/sausage-stuffers.htm"] [unique_id "arzQH_qg35hK59EQlD0bGQAAAAA"], referer: https://linkgeneratorseo.shop/dir/backlinks-for-search-ranking-222748
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-29 12:34:03
(4 weeks ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-26 17:01:31
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 13:01:13.320447 2026] [security2:error] [pid 4113:tid 4113] [client 190.142.102.69:37418] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pizzadata.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pizzadata.com"] [uri "/bak/all.sql"] [unique_id "arf6WV6a-OpDgQGKQ5WRkQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 02:28:12
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 22:28:05.427101 2026] [security2:error] [pid 17570:tid 17570] [client 190.142.102.69:9581] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||homecheckinmaine.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "homecheckinmaine.com"] [uri "/"] [unique_id "arcttVslf8JmtaIDyMaO7wAAAA0"], referer: https://bestdachecker.site/dir/custom-seo-backlinks-94055
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 21:37:16
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:37:10.083889 2026] [security2:error] [pid 29374:tid 29374] [client 190.142.102.69:59720] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emilybrass.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emilybrass.com"] [uri "/"] [unique_id "arbphoM2BmbDoxM3-lVcWgAAABA"], referer: https://websitelinkschecker.space/dir/expert-link-building-services-64553
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 08:34:00
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 190.142.102.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 04:33:52.969356 2026] [security2:error] [pid 5354:tid 5354] [client 190.142.102.69:41018] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||expreso.aguasolar.com|F|2"] [data ".mdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "expreso.aguasolar.com"] [uri "/data/db.mdb"] [unique_id "arTgcIghhQeti1Vero72ngAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-24 05:33:33
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
Bad Web Bot