🇺🇸
TPI-Abuse
2026-11-11 20:22:36
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:22:30.214761 2026] [security2:error] [pid 25542:tid 25542] [client 91.132.198.159:35901] ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:22:30.214761 2026] [security2:error] [pid 25542:tid 25542] [client 91.132.198.159:35901] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/chew2011/debt"] [unique_id "avTOhnRz8xQKs8nQiUYgYwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-06 00:33:07
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 00:32:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:32:35.955417 2026] [security2:error] [pid 24386:tid 24386] [client 91.132.198.159:53001] ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:32:35.955417 2026] [security2:error] [pid 24386:tid 24386] [client 91.132.198.159:53001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/nmos14/"] [unique_id "aup9I_LexKELDflxy7mRDgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-03 02:05:27
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 03:01:27
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:01:24.340427 2026] [security2:error] [pid 2101:tid 2101] [client 91.132.198.159:13947] M ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:01:24.340427 2026] [security2:error] [pid 2101:tid 2101] [client 91.132.198.159:13947] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||shirtzz.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "shirtzz.com"] [uri "/EMBfonts.html"] [unique_id "auQIhOUF197cCGYZrqHsDAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 22:11:56
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:11:49.794655 2026] [security2:error] [pid 20299:tid 20299] [client 91.132.198.159:46549] ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:11:49.794655 2026] [security2:error] [pid 20299:tid 20299] [client 91.132.198.159:46549] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.brunswickcemeteries.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.brunswickcemeteries.org"] [uri "/HTML/daniel_2.htm"] [unique_id "auJzJcUCI2dWASK3-hYmyQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2026-10-02 16:43:05
UTC ·
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇬🇧
relianoid.com
2026-09-08 07:02:18
UTC ·
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇨🇭
backslash
2026-06-02 11:36:00
UTC ·
(5 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2026-05-26 16:47:57
UTC ·
(5 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-16 22:13:52
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 18:13:45.366597 2026] [security2:error] [pid 30099:tid 30099] [client 91.132.198.159:49999] ...
show more
(mod_security) mod_security (id:210730) triggered by 91.132.198.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 18:13:45.366597 2026] [security2:error] [pid 30099:tid 30099] [client 91.132.198.159:49999] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Affinity II/Thumbs.db"] [unique_id "agjsGRL9gQSpyUaAyM2DDgAAABQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Affinity%20II/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-04-19 08:12:01
UTC ·
(6 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:50
UTC ·
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-06-18 16:26:00
UTC ·
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-18 time=08:18:42 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1750252722098819431 tz="-0500" logid="0101039426" type="even ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-18 time=08:18:42 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1750252722098819431 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=91.132.198.159 srccountry="United States" user="cperez" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
