🇺🇸
TPI-Abuse
2026-11-11 02:34:20
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:34:14.060462 2026] [security2:error] [pid 6634:tid 6634] [client 217.145.224.164:18533] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:34:14.060462 2026] [security2:error] [pid 6634:tid 6634] [client 217.145.224.164:18533] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/mrolympia/franco-columbu.html"] [unique_id "avPUJssNpRnNE9T7djYykwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:04:12
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:04:07.512312 2026] [security2:error] [pid 3953:tid 3953] [client 217.145.224.164:14243] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:04:07.512312 2026] [security2:error] [pid 3953:tid 3953] [client 217.145.224.164:14243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.watonga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.watonga.com"] [uri "/biblebios/lot/pl-ladies-de/"] [unique_id "avLP908BYcG_89X_j_z_lgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 11:18:08
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:18:05.610810 2026] [security2:error] [pid 12540:tid 12540] [client 217.145.224.164:1833 ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:18:05.610810 2026] [security2:error] [pid 12540:tid 12540] [client 217.145.224.164:18333] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.partybussantafe.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.partybussantafe.com"] [uri "/charter-service.html"] [unique_id "auxl7VFvRwULXRnXHXAXkgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 03:41:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:41:38.896190 2026] [security2:error] [pid 8344:tid 8344] [client 217.145.224.164:11791] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:41:38.896190 2026] [security2:error] [pid 8344:tid 8344] [client 217.145.224.164:11791] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "aulX8gPxuCO2mNtzbJfxGgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 06:22:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:22:45.295629 2026] [security2:error] [pid 28679:tid 28679] [client 217.145.224.164:4509 ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:22:45.295629 2026] [security2:error] [pid 28679:tid 28679] [client 217.145.224.164:45095] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thenewplantation.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thenewplantation.org"] [uri "/impeachment-a-squealing-neurotic-hysterical-temper-tantrum-because-we-just-cant-stand-that-you-won-and-the-economy-is-thriving-and-well-the-mueller-report-didnt-destroy-you-like-we-went-to/"] [unique_id "auQ3tbNl-j63WyQSaxiMGQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 17:20:08
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:20:01.591641 2026] [security2:error] [pid 29620:tid 29620] [client 217.145.224.164:2020 ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:20:01.591641 2026] [security2:error] [pid 29620:tid 29620] [client 217.145.224.164:20207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.niximperial.biz|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.niximperial.biz"] [uri "/c3s_0.html"] [unique_id "at-LwYj5JaZQnELXbNzT0QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 02:30:30
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 21:30:22.236599 2026] [security2:error] [pid 25760:tid 25760] [client 217.145.224.164:3526 ...
show more
(mod_security) mod_security (id:225170) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 21:30:22.236599 2026] [security2:error] [pid 25760:tid 25760] [client 217.145.224.164:35267] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drwolberg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drwolberg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLdPvHfQESdMMtZVwdXrQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 18:13:55
UTC ·
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 13:13:51.106202 2025] [security2:error] [pid 19923:tid 19923] [client 217.145.224.164:2603 ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 13:13:51.106202 2025] [security2:error] [pid 19923:tid 19923] [client 217.145.224.164:26035] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohnosound.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohnosound.com"] [uri "/"] [unique_id "aRjC33LSNpVcbt7wtN15BAAAAFk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 17:48:03
UTC ·
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 12:47:56.017874 2025] [security2:error] [pid 3341:tid 3341] [client 217.145.224.164:18651] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 12:47:56.017874 2025] [security2:error] [pid 3341:tid 3341] [client 217.145.224.164:18651] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||menzelassociates.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "menzelassociates.com"] [uri "/"] [unique_id "aRi8zKKdZdrt8Y0SgeGxjwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
wil.com
2025-04-01 10:49:55
UTC ·
(1 year ago)
GlobalProtect login attempts with user CYNTHIAF.
VPN IP
Brute-Force
🇨🇿
lp
2025-01-28 11:51:02
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.164
2025-01-28T11:27:18+01:00 vpn Access-Reject 'tube' station: 217.145.224.164 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.164
2025-01-28T11:27:18+01:00 vpn Access-Reject 'tube' station: 217.145.224.164 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-01-27 10:22:22
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.164
2025-01-27T11:16:10+01:00 vpn Access-Reject 'gh' station: 217.145.224.164 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.164
2025-01-27T11:16:10+01:00 vpn Access-Reject 'gh' station: 217.145.224.164 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2025-01-25 06:32:25
UTC ·
(1 year ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2025-01-23 13:43:36
UTC ·
(1 year ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2025-01-22 01:53:44
UTC ·
(1 year ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
