🇺🇸
TPI-Abuse
2026-11-10 13:08:32
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:08:29.192781 2026] [security2:error] [pid 29230:tid 29230] [client 193.163.89.12:47371] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:08:29.192781 2026] [security2:error] [pid 29230:tid 29230] [client 193.163.89.12:47371] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/education-reform/"] [unique_id "avMXTSTqTyGv8atTKupv0gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:58:54
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:58:48.104547 2026] [security2:error] [pid 31118:tid 31118] [client 193.163.89.12:47659] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:58:48.104547 2026] [security2:error] [pid 31118:tid 31118] [client 193.163.89.12:47659] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/backstore/Ekornes/Stressless-Consul-Large-Recliner-Chair-Ottoman.htm"] [unique_id "avFE-D1TZDWHEwf8Pq7WGAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 06:14:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:14:38.252243 2026] [security2:error] [pid 27913:tid 27913] [client 193.163.89.12:10131] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:14:38.252243 2026] [security2:error] [pid 27913:tid 27913] [client 193.163.89.12:10131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.thefrontporchoffering.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thefrontporchoffering.com"] [uri "/tunes/the-breeze"] [unique_id "auwezi_NTU-KppQnOlJOZAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:17:30
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:17:23.854567 2026] [security2:error] [pid 12011:tid 12011] [client 193.163.89.12:65031] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:17:23.854567 2026] [security2:error] [pid 12011:tid 12011] [client 193.163.89.12:65031] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.iee-usa.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.iee-usa.com"] [uri "/why-use-iee/"] [unique_id "aukoEwra3-qeYQ9wHYTeRQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 10:19:14
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 06:19:11.885757 2026] [security2:error] [pid 2083:tid 2083] [client 193.163.89.12:47263] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 06:19:11.885757 2026] [security2:error] [pid 2083:tid 2083] [client 193.163.89.12:47263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alexgitlin.com"] [uri "/livin.htm"] [unique_id "auMdnzJFHklQfEgXPD9JKAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 13:05:37
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:05:30.658184 2026] [security2:error] [pid 7565:tid 7565] [client 193.163.89.12:63719] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:05:30.658184 2026] [security2:error] [pid 7565:tid 7565] [client 193.163.89.12:63719] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.powerkiteforum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "auHzGvi5RmmFMIjwqzf-dwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 05:31:18
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 01:31:10.388160 2026] [security2:error] [pid 25025:tid 25025] [client 193.163.89.12:31293] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 01:31:10.388160 2026] [security2:error] [pid 25025:tid 25025] [client 193.163.89.12:31293] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||petiteplaisanceconservationfund.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "petiteplaisanceconservationfund.org"] [uri "/Author Page.html"] [unique_id "atrxHg6rO4mSXQIdcPmmPAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 01:12:35
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:12:31.377270 2026] [security2:error] [pid 15208:tid 15208] [client 193.163.89.12:58401] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:12:31.377270 2026] [security2:error] [pid 15208:tid 15208] [client 193.163.89.12:58401] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ispeakmusic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ispeakmusic.com"] [uri "/"] [unique_id "atgRf3M3JGx6LbxashJKagAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 17:45:52
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:45:46.747662 2026] [security2:error] [pid 21747:tid 21747] [client 193.163.89.12:40845] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:45:46.747662 2026] [security2:error] [pid 21747:tid 21747] [client 193.163.89.12:40845] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mikeziegler.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mikeziegler.com"] [uri "/archive/audio/v.html"] [unique_id "ateoykuyHYZSe2zYimdWcAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 14:52:24
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 10:52:19.772621 2026] [security2:error] [pid 15153:tid 15153] [client 193.163.89.12:57977] M ...
show more
(mod_security) mod_security (id:210730) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 10:52:19.772621 2026] [security2:error] [pid 15153:tid 15153] [client 193.163.89.12:57977] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Cobi/Thumbs.db"] [unique_id "asO5o71c9uMOFb5RM8Cd5wAAABc"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/Cobi/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-25 19:03:17
UTC ·
(2 months ago)
Web application attack detected.
Web App Attack
🇺🇸
nodepile
2026-08-12 18:54:39
UTC ·
(3 months ago)
Requests denied due to active blacklist hits (tenant=82 method=GET path=/factory-canbus-xenon-replacement-system-choose-model-p-1179.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.6578.175 Safar ...
show more
Requests denied due to active blacklist hits (tenant=82 method=GET path=/factory-canbus-xenon-replacement-system-choose-model-p-1179.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.6578.175 Safari/537.36')
show less
Web App Attack
Exploited Host
🇺🇸
nodepile
2026-08-09 08:47:38
UTC ·
(3 months ago)
Requests denied due to active blacklist hits (tenant=82 method=GET path=/exterior-tail-turn-side/bmw-exterior-lighting/bmw-tail-lights/bmw-f10-blackline-led-tails-for-sedan-for-520-528-535-550.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ...
show more
Requests denied due to active blacklist hits (tenant=82 method=GET path=/exterior-tail-turn-side/bmw-exterior-lighting/bmw-tail-lights/bmw-f10-blackline-led-tails-for-sedan-for-520-528-535-550.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7555.113 Safari/537.36')
show less
Web App Attack
Exploited Host
🇩🇪
HandyTreff.de
2026-07-16 17:38:36
UTC ·
(3 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -48.043 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.32.54
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-03 08:56:51
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 04:56:43.611438 2026] [security2:error] [pid 19394:tid 19394] [client 193.163.89.12:29371] M ...
show more
(mod_security) mod_security (id:210730) triggered by 193.163.89.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 04:56:43.611438 2026] [security2:error] [pid 19394:tid 19394] [client 193.163.89.12:29371] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Bristol II/Stetson Bordeaux/originals/Thumbs.db"] [unique_id "ah_sS2kJYxlr2aq78z5DBwAAAAg"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Bristol%20II/Stetson%20Bordeaux/originals/
show less
Brute-Force
Bad Web Bot
Web App Attack
