2026-11-08 15:24:03
UTC ·
(3 days ago)
Suspicious Opera user agent: outdated major version 117 (oldest supported 135); missing Accept-Language header; missing Sec-Fetch headers
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:23:24
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 192.101.66.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:23:20.830796 2026] [security2:error] [pid 12907:tid 12907] [client 192.101.66.132:10721] ...
show more
(mod_security) mod_security (id:210350) triggered by 192.101.66.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:23:20.830796 2026] [security2:error] [pid 12907:tid 12907] [client 192.101.66.132:10721] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rddeckerphotography.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rddeckerphotography.com"] [uri "/blog/index.php/2006/10/08/nurse-cherity-and-half-naked-native/"] [unique_id "au_rKERy70DVBJ_5FDxbUwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 23:08:44
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 192.101.66.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:08:39.534596 2026] [security2:error] [pid 23554:tid 23554] [client 192.101.66.132:29697] ...
show more
(mod_security) mod_security (id:210350) triggered by 192.101.66.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:08:39.534596 2026] [security2:error] [pid 23554:tid 23554] [client 192.101.66.132:29697] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/three-bostons-shane-mundy-april-2010/"] [unique_id "au5d97TkfD8u7qRuOnHdRAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 23:28:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 192.101.66.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:28:14.988605 2026] [security2:error] [pid 29244:tid 29244] [client 192.101.66.132:53889] ...
show more
(mod_security) mod_security (id:210350) triggered by 192.101.66.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:28:14.988605 2026] [security2:error] [pid 29244:tid 29244] [client 192.101.66.132:53889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/ekornes-stressless-recliner-chairs/stressless-crown-cori-blue-leather-recliner-chair.htm"] [unique_id "auu_jl0woTJKTFNgWdA9ZQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:07:37
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 192.101.66.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:07:32.333527 2026] [security2:error] [pid 30092:tid 30170] [client 192.101.66.132:14377] ...
show more
(mod_security) mod_security (id:210350) triggered by 192.101.66.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:07:32.333527 2026] [security2:error] [pid 30092:tid 30170] [client 192.101.66.132:14377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bullfrogspond.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bullfrogspond.com"] [uri "/whitburn/2011wye.htm"] [unique_id "auWhxNjUfHIdQ4dnjlnkSAAAAdE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-09-04 14:09:23
UTC ·
(2 months ago)
[SQL INJECTION] f2b match %{+Q}r for ^.*haproxy\[[0-9]+\]: <HOST>:.* (GET |POST ).*\?.*(%20AND%20|%20and%20|%20OR%20|%20or%20).* HTTP/1.1$
SQL Injection
🇩🇪
NxtGenIT
2024-03-28 08:59:45
UTC ·
(2 years ago)
192.101.66.132 has been observed attacking Port 8443. Observed Threat: Suspicious TLS Evasion Found
Web App Attack
