🇺🇸
TPI-Abuse
2026-11-12 17:55:50
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 88.148.93.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:55:46.189246 2026] [security2:error] [pid 1898:tid 1898] [client 88.148.93.121:52891] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.93.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:55:46.189246 2026] [security2:error] [pid 1898:tid 1898] [client 88.148.93.121:52891] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "avX9ojyejdNn7Q4EkdAOnwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 11:49:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.148.93.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:49:47.088988 2026] [security2:error] [pid 12557:tid 12557] [client 88.148.93.121:64537] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.93.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:49:47.088988 2026] [security2:error] [pid 12557:tid 12557] [client 88.148.93.121:64537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/political-islam/page/2/"] [unique_id "auxtW6LL1F9vNQdgYV-dIgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:14:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.148.93.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:14:46.903310 2026] [security2:error] [pid 28540:tid 28540] [client 88.148.93.121:11617] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.93.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:14:46.903310 2026] [security2:error] [pid 28540:tid 28540] [client 88.148.93.121:11617] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paleopathologist.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paleopathologist.com"] [uri "/overall-health/you-gotta-eat-some-dirt/"] [unique_id "aukndjKWVCYeYqs3uIrIvgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:57:56
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 88.148.93.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:57:51.948708 2026] [security2:error] [pid 23758:tid 23758] [client 88.148.93.121:31131] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.93.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:57:51.948708 2026] [security2:error] [pid 23758:tid 23758] [client 88.148.93.121:31131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hi-niemczuras.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hi-niemczuras.net"] [uri "/Nagasaki3.html"] [unique_id "auJv30wBWkaY9ttlN-VCDwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-20 06:28:50
UTC ·
(5 months ago)
Brute forcing Wordpress login
Hacking
Web App Attack
🇲🇾
Rizzy
2026-05-19 09:47:28
UTC ·
(5 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇲🇹
Malta
2026-05-19 04:06:28
UTC ·
(5 months ago)
88.148.93.121 - - [19/May/2026:06:06:27 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇩🇪
FeG Deutschland
2026-05-19 01:23:19
UTC ·
(5 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
2026-05-18 19:08:16
UTC ·
(5 months ago)
2026-05-18T21:08:14.787406+02:00 aion wordpress[1189504]: Blocked user enumeration attempt from 88.148.93.121
...
Hacking
Brute-Force
