2026-07-24 12:26:30
(12 hours ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2026-07-23 02:36:36
(1 day ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2026-07-22 01:44:57
(2 days ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 06:11:50
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 02:11:42.397377 2026] [security2:error] [pid 117671:tid 117671] [client 208.86.26.178:43161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||casadelsolmexico.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "casadelsolmexico.net"] [uri "/"] [unique_id "addDHgg5nhPQozZhqUa6JAAAAAA"], referer: https://casadelsolmexico.net
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 12:12:04
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 08:11:37.639956 2026] [security2:error] [pid 3022:tid 3098] [client 208.86.26.178:42053] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bacalodge.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bacalodge.com"] [uri "/company"] [unique_id "adOi-eKQMgr0CYwS6QAwggAAAIY"], referer: https://bacalodge.com/company
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 07:22:47
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 03:22:09.444564 2026] [security2:error] [pid 11774:tid 11774] [client 208.86.26.178:62853] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.stalbansparish.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stalbansparish.org"] [uri "/ministries/christian-enrichment-for-children/"] [unique_id "acjTIczd9G2bGxHTtqgg2QAAABo"], referer: https://www.stalbansparish.org/ministries/christian-enrichment-for-children/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
technojoe99
2026-03-28 21:36:14
(3 months ago)
Exploit scan from 208.86.26.178. GET /company HTTP/1.1.
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 09:46:09
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 05:44:41.442961 2026] [security2:error] [pid 8085:tid 8085] [client 208.86.26.178:52389] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.starsmogsandiego.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.starsmogsandiego.com"] [uri "/profile"] [unique_id "ab-6CTZx1a5Xd4_cJPGZfgAAABg"], referer: https://www.starsmogsandiego.com/profile
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-18 03:36:13
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 23:36:07.521094 2026] [security2:error] [pid 26953:tid 26957] [client 208.86.26.178:29987] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dasperformance.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dasperformance.com"] [uri "/about-us"] [unique_id "abodp8KeuGm_6Vjvxxr0uwAAAEA"], referer: https://dasperformance.com/about-us
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 09:17:14
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 05:17:08.842951 2026] [security2:error] [pid 10752:tid 10752] [client 208.86.26.178:34815] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||maldivesautismcentre.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "maldivesautismcentre.org"] [uri "/faq"] [unique_id "abfKlFCB1qb5_vcKZqbYQQAAAAw"], referer: http://maldivesautismcentre.org/faq
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-09 19:07:08
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 15:07:02.076620 2026] [security2:error] [pid 22156:tid 22162] [client 208.86.26.178:63347] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/aboutus"] [unique_id "aa8aVvRu1sqzaS7r7QBNngAAAMM"], referer: https://newtrendmag.org/aboutus
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-27 05:21:41
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 208.86.26.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 00:21:36.799853 2026] [security2:error] [pid 15765:tid 15765] [client 208.86.26.178:60683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||acquivest.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acquivest.net"] [uri "/"] [unique_id "aaEp4DFynBLdqP-bMYKhTgAAAAo"], referer: https://acquivest.net
show less
Brute-Force
Bad Web Bot
Web App Attack