🇺🇸
TPI-Abuse
2026-11-15 21:26:45
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:26:39.361419 2026] [security2:error] [pid 25878:tid 25878] [client 193.142.36.71:14943] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:26:39.361419 2026] [security2:error] [pid 25878:tid 25878] [client 193.142.36.71:14943] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bees.properties|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bees.properties"] [uri "/"] [unique_id "avojjx0y4vJaef6Ws9nNqQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 20:26:23
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 15:26:17.082434 2026] [security2:error] [pid 5117:tid 5117] [client 193.142.36.71:11033] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 15:26:17.082434 2026] [security2:error] [pid 5117:tid 5117] [client 193.142.36.71:11033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.garon.us"] [uri "/images2/obits/Goldish, Hilda Kupfer obit 2009.htm"] [unique_id "avoVaWRgk5EwAW9ie094rQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:18:23
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:18:17.485698 2026] [security2:error] [pid 11397:tid 11397] [client 193.142.36.71:60489] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:18:17.485698 2026] [security2:error] [pid 11397:tid 11397] [client 193.142.36.71:60489] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||davidocchino.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davidocchino.com"] [uri "/portfolio/promotions/index.html"] [unique_id "avRrGZNi4GSrHswf9LykRQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:18:31
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:18:25.960078 2026] [security2:error] [pid 5566:tid 5566] [client 193.142.36.71:55795] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:18:25.960078 2026] [security2:error] [pid 5566:tid 5566] [client 193.142.36.71:55795] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/1329"] [unique_id "avMLkW_AIUhfeMRIKMhPFwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:40:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:40:21.843836 2026] [security2:error] [pid 21811:tid 21922] [client 193.142.36.71:28337] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:40:21.843836 2026] [security2:error] [pid 21811:tid 21922] [client 193.142.36.71:28337] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fishrapper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishrapper.com"] [uri "/lund-1775-crossover.htm"] [unique_id "auu0VfpIQjcBn0pB1eQRXAAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-31 23:52:18
UTC ·
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 10:33:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:33:14.871949 2026] [security2:error] [pid 18453:tid 18453] [client 193.142.36.71:38265] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:33:14.871949 2026] [security2:error] [pid 18453:tid 18453] [client 193.142.36.71:38265] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/wedding-invitations/"] [unique_id "auHPaot1ay5kXHvnBwdSoAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
OnTheEdge
2026-09-08 13:26:39
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-09-05 20:16:35
UTC ·
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇫🇮
JimArchon72
2026-07-24 04:45:02
UTC ·
(3 months ago)
2026/07/24 04:42:18 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇨🇦
DRI
2026-07-22 21:55:12
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇬🇧
Oakley
2026-07-14 19:52:44
UTC ·
(4 months ago)
(mod_security) mod_security (id:900178) triggered by 193.142.36.71 (US/United States/-): 5 in the last 900 secs
Web App Attack
Hacking
🇦🇺
oncord
2026-07-06 18:26:47
UTC ·
(4 months ago)
Form spam
Web Spam
2026-06-30 23:56:21
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-56.193.142.36.71.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-06-30 08:27:19
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-27.193.142.36.71.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
