🇺🇸
Zandro
2026-11-11 20:00:14
UTC ·
(2 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-11 09:42:02
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:41:45.599227 2026] [security2:error] [pid 22762:tid 22762] [client 89.34.66.94:64113] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:41:45.599227 2026] [security2:error] [pid 22762:tid 22762] [client 89.34.66.94:64113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2013/11/18/cameroon-repels-major-car-rebel-incursion/"] [unique_id "avQ4WfYABuvH-iNPwhBz0gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 02:43:20
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:43:10.925028 2026] [security2:error] [pid 12862:tid 12862] [client 89.34.66.94:40219] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:43:10.925028 2026] [security2:error] [pid 12862:tid 12862] [client 89.34.66.94:40219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/lib/source/source/source/helpers/jquery.fancybox-thumbs.js"] [unique_id "avPWPtH5LxrqXUTkQlvZgQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
sssrit
2026-11-09 01:09:49
UTC ·
(5 days ago)
89.34.66.94 - - [09/Nov/2026:02:09:47 +0100] "GET /usini-e-vino-cresce-lattesa-per-levento-ajo-a-ippuntare/ HTTP/1.1" 404 13872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:38:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:38:18.278687 2026] [security2:error] [pid 23872:tid 23872] [client 89.34.66.94:17705] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:38:18.278687 2026] [security2:error] [pid 23872:tid 23872] [client 89.34.66.94:17705] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/11/20/report-tear-gas-used-in-nigeria-parliament/"] [unique_id "auuz2rdYdwdKmWhYhgFq_wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 04:06:48
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 00:06:39.779352 2026] [security2:error] [pid 31085:tid 31085] [client 89.34.66.94:45969] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 00:06:39.779352 2026] [security2:error] [pid 31085:tid 31085] [client 89.34.66.94:45969] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paleopathologist.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paleopathologist.com"] [uri "/tag/vitamin/"] [unique_id "auF0z0UQrCakzXsLKY29BgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:25:55
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:25:43.762770 2026] [security2:error] [pid 10564:tid 10564] [client 89.34.66.94:12563] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.66.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:25:43.762770 2026] [security2:error] [pid 10564:tid 10564] [client 89.34.66.94:12563] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||interartny.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "interartny.com"] [uri "/show11-09.htm"] [unique_id "atkfx3MMz-8QpNb36DpaXQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
