🇺🇦
URAN Publishing Service
2026-08-25 13:28:49
(5 days ago)
[25/Aug/2026:16:28:48 +0300] -- 207.166.160.49 Ban reason: User-Agent curl/
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 04:06:54
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 00:06:50.713320 2025] [security2:error] [pid 25397:tid 25397] [client 207.166.160.49:48996] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.glendaleheritage.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.glendaleheritage.org"] [uri "/glendale/wp-content/uploads/2018/11/GHP-Spring-2018-newsletter.pdf"] [unique_id "aHh22hAgcF054VWGXJtq8wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-07 18:39:14
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 14:39:10.574380 2025] [security2:error] [pid 6237:tid 6237] [client 207.166.160.49:44538] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||yarbroughfamily.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yarbroughfamily.org"] [uri "/YMbrs/archives/Blandford/Vol023.pdf"] [unique_id "aGwUToLKRcUUnRmb7YjMAgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2025-07-05 22:08:43
(1 year ago)
Web attack from 207.166.160.49
Web App Attack
🇺🇸
TPI-Abuse
2025-07-05 13:09:17
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 05 09:09:11.144154 2025] [security2:error] [pid 19574:tid 19685] [client 207.166.160.49:38084] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gmentz.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gmentz.com"] [uri "/tag/certified-project-manager/"] [unique_id "aGkj92NtPWlN7zxe2temfgAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-04 01:08:56
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 21:08:49.518499 2025] [security2:error] [pid 18081:tid 18081] [client 207.166.160.49:39684] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||visitbyblos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "visitbyblos.com"] [uri "/360/27data/graphics/cursors_move_html5.cur"] [unique_id "aGcpoYPs7oteRXRPOvEyyQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-26 22:12:34
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 26 18:12:28.633444 2025] [security2:error] [pid 1318785:tid 1318797] [client 207.166.160.49:37172] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||econpage.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "econpage.com"] [uri "/201/dailyquestions/Section3/Monopoly - Day17.pdf"] [unique_id "aF3FzCeGeec9AyM9zfb8uAAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-26 18:43:47
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 26 14:43:43.637230 2025] [security2:error] [pid 1834752:tid 1834752] [client 207.166.160.49:59946] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.psychtraining.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.psychtraining.org"] [uri "/Paper_II_Stimulus.pdf"] [unique_id "aF2U3ystCKTPry0lYjWjSgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-26 13:36:34
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 26 09:36:31.244180 2025] [security2:error] [pid 1168425:tid 1168425] [client 207.166.160.49:45702] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chrisbilder.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chrisbilder.com"] [uri "/regression/chapters/power.txt"] [unique_id "aF1M3xmKkR0SbDnlREiQPwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-24 03:00:45
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 23:00:37.610110 2025] [security2:error] [pid 175915:tid 175915] [client 207.166.160.49:54274] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||3905ccn.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "3905ccn.org"] [uri "/files/newCenturion/centurion-2016-v2016n2.pdf"] [unique_id "aFoU1YlaSU8EFvmZvktZBwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-23 12:40:02
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 08:39:58.186656 2025] [security2:error] [pid 2529323:tid 2529323] [client 207.166.160.49:33782] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lertap5.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lertap5.com"] [uri "/Documentation/UsingThedifRpackage.pdf&sa=U&ved=2ahUKEwitv5is67mLAxWoHzQIHRGLM4cQFnoFCPMDEAE&usg=AOvVaw0PxZ7k5NJCjpCppjSez-_d"] [unique_id "aFlLHq4dYtTk2djLcPuPbgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-23 08:35:26
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 04:35:18.708420 2025] [security2:error] [pid 1294069:tid 1294069] [client 207.166.160.49:44602] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.williamcline.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.williamcline.com"] [uri "/lex/Flights-to-Bonaire-Whitepaper.pdf"] [unique_id "aFkRxuxx2gfwPsgIa1SYHgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-23 02:16:26
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 22:16:18.444785 2025] [security2:error] [pid 2083153:tid 2083153] [client 207.166.160.49:48634] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||myhomeflyer.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "myhomeflyer.com"] [uri "/Flyer_Lafayette.pdf"] [unique_id "aFi48lrlYckKwiQM3h1PRAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-22 23:01:57
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 19:01:53.137970 2025] [security2:error] [pid 633017:tid 633017] [client 207.166.160.49:49222] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.player-care.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.player-care.com"] [uri "/schumann/US821917.pdf"] [unique_id "aFiLYSbIyAW5smKWNCVzBQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-22 22:05:15
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 207.166.160.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 18:05:07.938095 2025] [security2:error] [pid 2017517:tid 2017517] [client 207.166.160.49:41756] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||acmax.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acmax.com"] [uri "/home/images/sampledata/products/hvacr_controllers/air_economizers_controllers/et_757/000675-A.pdf"] [unique_id "aFh-E21oW6BITU1dH1xV7AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
