🇺🇸
TPI-Abuse
2026-11-12 16:12:45
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:12:39.118581 2026] [security2:error] [pid 30138:tid 30138] [client 217.145.225.205:5851 ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:12:39.118581 2026] [security2:error] [pid 30138:tid 30138] [client 217.145.225.205:58517] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/boston/"] [unique_id "avXldy4ITaG4mOgeI5wNWgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:25:01
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:24:51.467072 2026] [security2:error] [pid 1649521:tid 1649651] [client 217.145.225.205: ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:24:51.467072 2026] [security2:error] [pid 1649521:tid 1649651] [client 217.145.225.205:61369] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||delapiazza.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "delapiazza.com"] [uri "/designer-fabric-grocery-shopper-bags/reusable-shopping-bag-made-with-designer-fabric-2"] [unique_id "avES09myRT0fQXsfUNyhhgAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 22:59:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:59:41.179866 2026] [security2:error] [pid 6250:tid 6250] [client 217.145.225.205:23657] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:59:41.179866 2026] [security2:error] [pid 6250:tid 6250] [client 217.145.225.205:23657] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||backstore.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "backstore.com"] [uri "/backstore/ILD-ratings.htm"] [unique_id "auJ-XYf6C_VghUP4TyM5ygAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 15:50:21
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:50:15.795538 2026] [security2:error] [pid 21424:tid 21424] [client 217.145.225.205:2775 ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:50:15.795538 2026] [security2:error] [pid 21424:tid 21424] [client 217.145.225.205:27757] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||briancastle.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "briancastle.com"] [uri "/bc_oculomotor_nuclei.php"] [unique_id "atzTt8cDOt3PNIW_WFitUwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:53:37
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:53:30.490264 2026] [security2:error] [pid 16684:tid 16684] [client 217.145.225.205:3691 ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.225.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:53:30.490264 2026] [security2:error] [pid 16684:tid 16684] [client 217.145.225.205:36919] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||linnardfinancial.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "linnardfinancial.com"] [uri "/Outlook_and_Trends/OTOct2025.htm"] [unique_id "atkmSoL_ISy7f8sVS3RWrQAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-26 16:51:00
UTC ·
(7 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
oncord
2026-02-19 22:23:24
UTC ·
(8 months ago)
Form spam
Web Spam
🇨🇭
backslash
2026-01-06 03:25:05
UTC ·
(10 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:02:22
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2024-04-20 16:00:49
UTC ·
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
