🇺🇸
TPI-Abuse
2026-11-15 01:31:18
UTC ·
(3 minutes ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:31:01.859577 2026] [security2:error] [pid 25656:tid 25656] [client 89.34.66.100:41077] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:31:01.859577 2026] [security2:error] [pid 25656:tid 25656] [client 89.34.66.100:41077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/posts/3394"] [unique_id "avkLVXpPrp57bmRhsWPkOgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 12:12:05
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:11:52.604187 2026] [security2:error] [pid 32504:tid 32504] [client 89.34.66.100:9721] ModS ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:11:52.604187 2026] [security2:error] [pid 32504:tid 32504] [client 89.34.66.100:9721] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/e7db3006c018c1c4862566bd000abc75/28c638712356aaa3862566eb005f99d2_7b4ad6db.html"] [unique_id "avhQCNL7rkU5FbxOSCC7nAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-13 12:00:14
UTC ·
(1 day ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-13 08:51:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:51:13.179532 2026] [security2:error] [pid 7941:tid 8014] [client 89.34.66.100:34557] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:51:13.179532 2026] [security2:error] [pid 7941:tid 8014] [client 89.34.66.100:34557] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.seasonsgreeters.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.seasonsgreeters.net"] [uri "/"] [unique_id "avbPgdiUAaLuAgNwoKp93wAAAsM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 13:35:44
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:35:31.008753 2026] [security2:error] [pid 776:tid 776] [client 89.34.66.100:53711] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:35:31.008753 2026] [security2:error] [pid 776:tid 776] [client 89.34.66.100:53711] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.powerkiteforum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "auNLo5OV3sJo-P2r66MFcQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 11:43:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 07:43:30.267146 2026] [security2:error] [pid 4436:tid 4436] [client 89.34.66.100:27093] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 07:43:30.267146 2026] [security2:error] [pid 4436:tid 4436] [client 89.34.66.100:27093] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rlharmongroup.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rlharmongroup.com"] [uri "/level3pages/employers/jobOffer.html"] [unique_id "auMxYpnhlE3MmAyXtKjz0gAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-23 07:36:34
UTC ·
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
LRob
2026-10-18 23:54:15
UTC ·
(3 weeks ago)
Wordlist path sweep | method: GET | path: /le-groupe/nos-filiales/comexposium-one-to-one/wp-login.php, /le-groupe/nos-filiales/comexposium-one-to-one/wp-login/, /le-groupe/nos-filiales/comexposium-one-to-one/login/ (+3 more) | ua: CMS-Security-Audito ...
show more
Wordlist path sweep | method: GET | path: /le-groupe/nos-filiales/comexposium-one-to-one/wp-login.php, /le-groupe/nos-filiales/comexposium-one-to-one/wp-login/, /le-groupe/nos-filiales/comexposium-one-to-one/login/ (+3 more) | ua: CMS-Security-Auditor/1.0 (+authorized self-check; contact: local-admin)
show less
Port Scan
Web App Attack
