🇺🇸
TPI-Abuse
2026-11-12 18:37:25
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:37:17.824742 2026] [security2:error] [pid 10495:tid 10495] [client 193.202.86.147:21609] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:37:17.824742 2026] [security2:error] [pid 10495:tid 10495] [client 193.202.86.147:21609] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mobresearchinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mobresearchinc.com"] [uri "/js/jquery.prettyPhoto.js"] [unique_id "avYHXaV9Sn7_E5ccIqElGwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 10:58:25
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:58:17.548131 2026] [security2:error] [pid 11386:tid 11396] [client 193.202.86.147:48277] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:58:17.548131 2026] [security2:error] [pid 11386:tid 11396] [client 193.202.86.147:48277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbestcarting.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbestcarting.com"] [uri "/dumpster-rental-glen-head/"] [unique_id "avL4ySxsrvWvP4yeLXsrHAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:16:27
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:16:21.163569 2026] [security2:error] [pid 28988:tid 28988] [client 193.202.86.147:16103] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:16:21.163569 2026] [security2:error] [pid 28988:tid 28988] [client 193.202.86.147:16103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.desertvacationvillas.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.desertvacationvillas.com"] [uri "/ru-ru/attractions.htm"] [unique_id "avFJFUnC0zKgr662DzQ1_gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 03:56:37
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:56:34.248908 2026] [security2:error] [pid 30927:tid 30927] [client 193.202.86.147:56717] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 23:56:34.248908 2026] [security2:error] [pid 30927:tid 30927] [client 193.202.86.147:56717] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||steinmetzjewelers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "steinmetzjewelers.com"] [uri "/gpahomeinspections.com/index-4.html"] [unique_id "auFycgIrzEDvVlLtL7_tnAAAAD8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 15:18:31
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:18:28.285893 2026] [security2:error] [pid 2484:tid 2484] [client 193.202.86.147:15199] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:18:28.285893 2026] [security2:error] [pid 2484:tid 2484] [client 193.202.86.147:15199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gadgeteer.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gadgeteer.net"] [uri "/twilightsrise/doku.php"] [unique_id "at9vRBZfWbrIMWLtWapFWgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 14:57:32
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:57:27.881562 2026] [security2:error] [pid 10050:tid 10050] [client 193.202.86.147:11123] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:57:27.881562 2026] [security2:error] [pid 10050:tid 10050] [client 193.202.86.147:11123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rockitfish.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rockitfish.com"] [uri "/fightingspirit/zen.html"] [unique_id "atzHVwpjVzYKUgoeD0wpIQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 00:16:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:16:08.717923 2026] [security2:error] [pid 30164:tid 30164] [client 193.202.86.147:18781] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.86.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:16:08.717923 2026] [security2:error] [pid 30164:tid 30164] [client 193.202.86.147:18781] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alizakarp.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alizakarp.com"] [uri "/experientialarticles/sefertorahgushkatif.htm"] [unique_id "atqnSLxc1s3sBzViBOwgCgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
rafix
2023-11-01 00:38:25
UTC ·
(3 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
