🇺🇸
TPI-Abuse
2026-11-09 14:17:49
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:17:37.995018 2026] [security2:error] [pid 22165:tid 22165] [client 64.49.37.172:9477] ModS ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:17:37.995018 2026] [security2:error] [pid 22165:tid 22165] [client 64.49.37.172:9477] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.darrenj.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.darrenj.com"] [uri "/uncategorized/wet-willies-beale-street-memphis-tn/"] [unique_id "avHWAZNyiAgpOC2zO4HaAgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:43:21
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:43:11.883249 2026] [security2:error] [pid 22756:tid 22756] [client 64.49.37.172:27867] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:43:11.883249 2026] [security2:error] [pid 22756:tid 22756] [client 64.49.37.172:27867] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/HermanMiller/Embody-Chair/Embody-Chair-Black-Rhythm-White-Frame-Titanium-Base.htm"] [unique_id "avEzPzDQuA2Xnz2-IXnL9QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 06:21:18
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:21:11.235729 2026] [security2:error] [pid 27507:tid 27507] [client 64.49.37.172:63101] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:21:11.235729 2026] [security2:error] [pid 27507:tid 27507] [client 64.49.37.172:63101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.kbalan.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kbalan.com"] [uri "/books/perfect-fit-box-set/"] [unique_id "avAU1yZvjKOYAFE6IfAdOgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 21:12:15
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:12:03.251537 2026] [security2:error] [pid 22002:tid 22002] [client 64.49.37.172:16321] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:12:03.251537 2026] [security2:error] [pid 22002:tid 22002] [client 64.49.37.172:16321] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/faith-and-reason/what-makes-a-catholic-university/"] [unique_id "au-UI7z50OfsxmnEy4KUhQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 16:55:06
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:54:53.986683 2026] [security2:error] [pid 19950:tid 19950] [client 64.49.37.172:29919] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:54:53.986683 2026] [security2:error] [pid 19950:tid 19950] [client 64.49.37.172:29919] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/chew2009/serious"] [unique_id "au9X3aay4zXaUyhBTQjWgAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 04:00:34
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 23:00:26.589744 2026] [security2:error] [pid 14553:tid 14553] [client 64.49.37.172:15213] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 23:00:26.589744 2026] [security2:error] [pid 14553:tid 14553] [client 64.49.37.172:15213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||frightlibrary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "frightlibrary.org"] [uri "/lib/leopard.htm"] [unique_id "auv_WsCr16o62HoBLyjaiAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-02 04:00:14
UTC ·
(1 week ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-10-23 21:29:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:29:07.854213 2026] [security2:error] [pid 10693:tid 10693] [client 64.49.37.172:23297] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:29:07.854213 2026] [security2:error] [pid 10693:tid 10693] [client 64.49.37.172:23297] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nationalenq.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nationalenq.com"] [uri "/national-enq-reports-how-long-does-coronavirus-live-on-your-apple-iphone-samsung-huawei-xiaomi-oneplus-lg-or-motorola-phone-which-high-risk-phone-infected-more-people-with-covid-19/"] [unique_id "atvRoznkZOMOGMBtP_3OfgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 18:31:53
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:31:43.770359 2026] [security2:error] [pid 28339:tid 28339] [client 64.49.37.172:37479] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.37.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:31:43.770359 2026] [security2:error] [pid 28339:tid 28339] [client 64.49.37.172:37479] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.testrong.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.testrong.com"] [uri "/forum3/index.php"] [unique_id "atuoDwS2I6meW_H249FKaQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-03 02:48:00
UTC ·
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-12-28 19:36:33
UTC ·
(10 months ago)
IM360 WAF: Attempt to upload malware
Hacking
2025-12-20 01:33:13
UTC ·
(10 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-33.64.49.37.172.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇩🇪
f2_IT
2025-11-07 02:07:10
UTC ·
(1 year ago)
SSLVPN Login attempt (blocked type h) from 64.49.37.172
Brute-Force
🇩🇪
f2_IT
2025-11-06 01:44:43
UTC ·
(1 year ago)
SSLVPN Login attempt (blocked type h) from 64.49.37.172
Brute-Force
🇺🇸
[email protected]
2025-10-28 01:02:10
UTC ·
(1 year ago)
Fail2Ban jail apache-json-scanners detected activity on 2025-10-28T01:02:10Z
Brute-Force
