🇺🇸
TPI-Abuse
2026-11-10 09:29:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:29:15.289704 2026] [security2:error] [pid 27201:tid 27201] [client 194.99.26.212:39491] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:29:15.289704 2026] [security2:error] [pid 27201:tid 27201] [client 194.99.26.212:39491] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.themadwriter.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.themadwriter.us"] [uri "/america-gets-an-infrastructure-bill-8951.htm/trackback"] [unique_id "avLj6xLZwZau02ekm2A2ZQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:41:09
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:41:02.692788 2026] [security2:error] [pid 9302:tid 9302] [client 194.99.26.212:47469] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:41:02.692788 2026] [security2:error] [pid 9302:tid 9302] [client 194.99.26.212:47469] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/mrolympia/dorian-yates.html"] [unique_id "avHbfueaPN6i8Jl07psRuAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 21:19:19
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:19:12.518865 2026] [security2:error] [pid 6418:tid 6418] [client 194.99.26.212:62619] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:19:12.518865 2026] [security2:error] [pid 6418:tid 6418] [client 194.99.26.212:62619] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.limosnapa.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.limosnapa.com"] [uri "/about-limos-napa.html"] [unique_id "auuhUAUc-NaYSgWN_sWnSAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 19:13:43
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:13:37.926623 2026] [security2:error] [pid 6238:tid 6238] [client 194.99.26.212:33145] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:13:37.926623 2026] [security2:error] [pid 6238:tid 6238] [client 194.99.26.212:33145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stewhist.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stewhist.org"] [uri "/html/Links.htm"] [unique_id "atkO4SwUk-jHtRGeBDw7ngAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 19:50:28
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:50:21.359647 2026] [security2:error] [pid 1676874:tid 1676874] [client 194.99.26.212:2843 ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:50:21.359647 2026] [security2:error] [pid 1676874:tid 1676874] [client 194.99.26.212:28435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||herrell.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "herrell.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ame2fX4qbHKO-WAVsj_JGgAAABo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-27 10:43:59
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-20 20:11:06
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 04:54:00
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 00:53:54.991427 2026] [security2:error] [pid 26458:tid 26458] [client 194.99.26.212:32275] M ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 00:53:54.991427 2026] [security2:error] [pid 26458:tid 26458] [client 194.99.26.212:32275] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||schmitzcomm.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "schmitzcomm.net"] [uri "/wp-json/wp/v2/users"] [unique_id "alcSYldLfRf4BLSe52Mz1wAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-06-29 22:59:38
UTC ·
(4 months ago)
Brute force
Brute-Force
2026-05-28 14:44:48
UTC ·
(5 months ago)
SQL injection, multiple attempts.
SQL Injection
🇺🇸
octageeks.com
2026-05-21 04:09:47
UTC ·
(5 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
2026-05-14 04:23:06
UTC ·
(5 months ago)
IM360 WAF: Possible SQL injection attack MV:ASC))),(CASt(%27~%27
SQL Injection
🇹🇷
rtbh.com.tr
2026-03-29 20:12:19
UTC ·
(7 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2026-03-28 20:12:18
UTC ·
(7 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2026-03-17 02:18:30
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 22:18:23.038746 2026] [security2:error] [pid 25066:tid 25066] [client 194.99.26.212:28303] M ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.26.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 22:18:23.038746 2026] [security2:error] [pid 25066:tid 25066] [client 194.99.26.212:28303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abi573dHAmS1CjeZG8ALdwAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
