🇺🇸
TPI-Abuse
2026-11-14 14:56:43
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:56:27.836352 2026] [security2:error] [pid 31874:tid 31874] [client 89.34.66.180:25599] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:56:27.836352 2026] [security2:error] [pid 31874:tid 31874] [client 89.34.66.180:25599] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/3e8bddb381ab8aff862566bd000abc73/2eb9a48eb1d78c75862566e9005b3421_7b4ad6db.html"] [unique_id "avh2m8LbwEXI0fFZml2hdwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
bps-statistics
2026-11-14 02:31:24
UTC ·
(13 hours ago)
WP Login Scan Activities: "2026-11-14T09:31:24.463+07:00" "/wp-login.php" "89.34.66.180" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
Web App Attack
🇮🇩
bps-statistics
2026-11-14 02:31:24
UTC ·
(13 hours ago)
WP Admin Scan Activities: "2026-11-14T09:31:24.355+07:00" "/wp-admin/index.php" "89.34.66.180" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
Web App Attack
🇫🇷
dynamix
2026-11-14 02:25:47
UTC ·
(13 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:49:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:49:04.621762 2026] [security2:error] [pid 23650:tid 23650] [client 89.34.66.180:11701] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:49:04.621762 2026] [security2:error] [pid 23650:tid 23650] [client 89.34.66.180:11701] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gundiahgazette.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gundiahgazette.com.au"] [uri "/History-VolunteerAirObserv.html"] [unique_id "au4TEAR8FDXOlpbJI-jUDgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 19:24:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:24:11.623113 2026] [security2:error] [pid 31639:tid 31639] [client 89.34.66.180:60639] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:24:11.623113 2026] [security2:error] [pid 31639:tid 31639] [client 89.34.66.180:60639] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/2011/02/20/2011-book-13-do-androids-dream-of-electric-sheep/"] [unique_id "auzX21SdTNIF4v_bGolWzwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 13:52:52
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:52:40.002812 2026] [security2:error] [pid 30650:tid 30650] [client 89.34.66.180:28715] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:52:40.002812 2026] [security2:error] [pid 30650:tid 30650] [client 89.34.66.180:28715] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vrmapping.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vrmapping.net"] [uri "/help5/fastdelete.htm"] [unique_id "atjDp3HFZ9Kl1DIqyU3LRAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 16:01:53
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:01:41.973822 2026] [security2:error] [pid 11199:tid 11199] [client 89.34.66.180:28505] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:01:41.973822 2026] [security2:error] [pid 11199:tid 11199] [client 89.34.66.180:28505] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thegoldentether.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thegoldentether.com"] [uri "/board/viewtopic.php"] [unique_id "atJKZfh8HWXTQliOh_LZGQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
