🇺🇸
TPI-Abuse
2026-03-06 18:34:50
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 13:34:46.525335 2026] [security2:error] [pid 26680:tid 26680] [client 91.246.51.44:16669] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sahinozalit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sahinozalit.com"] [uri "/"] [unique_id "aaseRtX3lL8CJPgkfmKplQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-20 06:02:54
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 01:02:44.990361 2025] [security2:error] [pid 23545:tid 23545] [client 91.246.51.44:60935] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.powerastronomy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerastronomy.com"] [uri "/Runequest/doku.php"] [unique_id "aUY8BFgkY-X-i1E8iJeFZwAAAA0"], referer: http://www.powerastronomy.com/Runequest/doku.php?id=cat888_bet
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-07 05:50:29
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 07 01:50:26.101536 2025] [security2:error] [pid 13618:tid 13618] [client 91.246.51.44:29473] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||evelynkay.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "evelynkay.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOSqIk6SfTnGon6QKJImlAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-04 19:47:27
(8 months ago)
wordpress-trap
Web App Attack
🇺🇸
TPI-Abuse
2025-10-04 11:50:26
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 07:50:19.685109 2025] [security2:error] [pid 8060:tid 8060] [client 91.246.51.44:45985] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||accommodation-perthairport.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "accommodation-perthairport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOEJ-_rmcPe9OPaXcugEHgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rip
2025-10-04 08:37:34
(8 months ago)
Apache Authentication attack. CMS Brute Force - Access Forbidden
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-10-04 06:18:29
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 02:18:21.067219 2025] [security2:error] [pid 7758:tid 7758] [client 91.246.51.44:44391] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kawkacevents.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kawkacevents.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOC8LVbN7zhhk4YEHcFjDwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-03 19:24:52
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 15:24:47.323398 2025] [security2:error] [pid 411620:tid 411620] [client 91.246.51.44:17329] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calogerolawfirm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calogerolawfirm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOAi_85QrZsh7ITsmh5S-gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-02 20:36:18
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 02 16:36:13.016502 2025] [security2:error] [pid 16862:tid 16862] [client 91.246.51.44:52169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||interiorsolutions-stuart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "interiorsolutions-stuart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aN7iPS_IIr5KSW8ooIylLwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-01 18:49:01
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 91.246.51.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 14:48:57.509480 2025] [security2:error] [pid 2781:tid 2781] [client 91.246.51.44:16539] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||persnicketyinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "persnicketyinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aN13mUbe8aoFwy7xjXY0MAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Gabo2710
2025-10-01 08:08:00
(8 months ago)
Fraud Orders
2025-09-30 04:20:19
(8 months ago)
Malicious activity detected
Hacking
Web App Attack
🇨🇳
ThreatBook.io
2025-05-04 00:52:52
(1 year ago)
2025-05-03 22:54:20 /+CSCOE+/logon.html
Web App Attack
🇨🇭
backslash
2025-04-18 07:05:04
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-04-12 18:19:07
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.12 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.04.12 is noted in report timestamp
show less
Hacking
Brute-Force