🇺🇸
TPI-Abuse
2026-11-12 06:11:26
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:11:21.698625 2026] [security2:error] [pid 17858:tid 17858] [client 77.243.89.139:22587] M ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:11:21.698625 2026] [security2:error] [pid 17858:tid 17858] [client 77.243.89.139:22587] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jadonbooth.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jadonbooth.com"] [uri "/robots.txt"] [unique_id "avVYiZvus7tZYLVHOtxEcQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 14:44:51
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:44:47.098022 2026] [security2:error] [pid 30326:tid 30326] [client 77.243.89.139:21689] M ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:44:47.098022 2026] [security2:error] [pid 30326:tid 30326] [client 77.243.89.139:21689] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.scoutinsignia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.scoutinsignia.com"] [uri "/chip.htm"] [unique_id "avR_XxgRnpPGPq068t7NLQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:53:58
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:53:52.532487 2026] [security2:error] [pid 12984:tid 12984] [client 77.243.89.139:45835] M ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:53:52.532487 2026] [security2:error] [pid 12984:tid 12984] [client 77.243.89.139:45835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/aparatos/agitadormagneticodigitalagimaticsdscjps.html"] [unique_id "avHQcGWqaNaUM-G1y2fROQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:57:57
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:57:54.186918 2026] [security2:error] [pid 3848:tid 3848] [client 77.243.89.139:32553] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:57:54.186918 2026] [security2:error] [pid 3848:tid 3848] [client 77.243.89.139:32553] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ontrek.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ontrek.com"] [uri "/about"] [unique_id "au_lMmz7rwofhK3pGGCNGQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-07 01:14:30
UTC ·
(5 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 20:29:27
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 16:29:22.343036 2026] [security2:error] [pid 15245:tid 15245] [client 77.243.89.139:27695] M ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.89.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 16:29:22.343036 2026] [security2:error] [pid 15245:tid 15245] [client 77.243.89.139:27695] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cchockeyhistory.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cchockeyhistory.org"] [uri "/SooMichiganIHLteams.htm"] [unique_id "atvDot6V5bZue7rNm0HoogAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-05-19 09:42:03
UTC ·
(1 year ago)
[19/May/2025:19:42:02 +1000] "GET /admin.php HTTP/1.1" 301 250 "http://[X].[X]/admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
Hacking
Web App Attack
