🇺🇸
TPI-Abuse
2026-11-09 11:43:09
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:43:03.927210 2026] [security2:error] [pid 28414:tid 28414] [client 91.132.124.83:31809] M ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:43:03.927210 2026] [security2:error] [pid 28414:tid 28414] [client 91.132.124.83:31809] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||guldunyayayinlari.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "guldunyayayinlari.com"] [uri "/2018/03/bir-muharebe-alani-olarak-beden/"] [unique_id "avGxxyKemF0YLcwCsZN-9AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-08 18:48:33
UTC ·
(6 days ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 06:05:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:05:18.342812 2026] [security2:error] [pid 9187:tid 9187] [client 91.132.124.83:61109] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:05:18.342812 2026] [security2:error] [pid 9187:tid 9187] [client 91.132.124.83:61109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flatchestedmama.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flatchestedmama.com"] [uri "/archive/love-poems-to-sailors"] [unique_id "avARHn1kbps5MXNTfPntXwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 19:09:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:09:38.858746 2026] [security2:error] [pid 7425:tid 7425] [client 91.132.124.83:38553] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:09:38.858746 2026] [security2:error] [pid 7425:tid 7425] [client 91.132.124.83:38553] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cbcfargo.com"] [uri "/site/Resources/devotionals/2024-12-29.php"] [unique_id "auzUcn0Y9h0ZWRRzOcEcnQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 15:02:03
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 11:02:00.089799 2026] [security2:error] [pid 25378:tid 25378] [client 91.132.124.83:27921] M ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 11:02:00.089799 2026] [security2:error] [pid 25378:tid 25378] [client 91.132.124.83:27921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/jek/jrgb/int-bib/int.html"] [unique_id "auSxaGavFtlwq64athOIhAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 10:31:05
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:30:58.409278 2026] [security2:error] [pid 746:tid 746] [client 91.132.124.83:17893] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:30:58.409278 2026] [security2:error] [pid 746:tid 746] [client 91.132.124.83:17893] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||museum.henning.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "museum.henning.org"] [uri "/gasteboek/"] [unique_id "auRx4jj1vxooMcsQ_Dv-7gAAAHQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-30 03:16:37
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 08:37:31
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:37:24.754658 2026] [security2:error] [pid 25329:tid 25329] [client 91.132.124.83:31475] M ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:37:24.754658 2026] [security2:error] [pid 25329:tid 25329] [client 91.132.124.83:31475] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cosplayculture.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cosplayculture.com"] [uri "/2017/11/10/fallout-4-diy-building-the-fat-man-for-cosplay-in-15-steps/"] [unique_id "at8RRK7PChYIZvO1s1tjdwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 16:05:12
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 12:05:06.734321 2026] [security2:error] [pid 23491:tid 23491] [client 91.132.124.83:50311] M ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 12:05:06.734321 2026] [security2:error] [pid 23491:tid 23491] [client 91.132.124.83:50311] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mosherpit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mosherpit.com"] [uri "/2012/05/attack-block.html"] [unique_id "atzXMln9omIp6sGBfMC9SgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 09:00:40
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:00:35.213811 2026] [security2:error] [pid 22872:tid 22872] [client 91.132.124.83:10909] M ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:00:35.213811 2026] [security2:error] [pid 22872:tid 22872] [client 91.132.124.83:10909] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tmcenvironment.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tmcenvironment.com"] [uri "/Expertise.html"] [unique_id "atxzs0yZEmU0aohpt5oN4wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-07-26 11:58:14
UTC ·
(3 months ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇺🇸
TPI-Abuse
2026-07-03 07:37:09
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:37:01.538578 2026] [security2:error] [pid 31000:tid 31000] [client 91.132.124.83:41831] M ...
show more
(mod_security) mod_security (id:225170) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:37:01.538578 2026] [security2:error] [pid 31000:tid 31000] [client 91.132.124.83:41831] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soundtrax.net"] [uri "/wp-json/wp/v2/users"] [unique_id "akdmnbzQIcbcjOU7TtwnDQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 08:55:16
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 04:55:01.223462 2026] [security2:error] [pid 17150:tid 17150] [client 91.132.124.83:15425] M ...
show more
(mod_security) mod_security (id:210730) triggered by 91.132.124.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 04:55:01.223462 2026] [security2:error] [pid 17150:tid 17150] [client 91.132.124.83:15425] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Power Chairs/Alante Jr/Thumbs.db"] [unique_id "ah_r5bt7GiOvkQXb_8wKnAAAAAE"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Power%20Chairs/Alante%20Jr/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-06-02 20:11:44
UTC ·
(5 months ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇨🇭
backslash
2026-03-11 23:48:02
UTC ·
(8 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
