🇺🇸
TPI-Abuse
2026-11-13 10:22:58
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:22:54.011089 2026] [security2:error] [pid 18324:tid 18324] [client 94.76.159.220:35475] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:22:54.011089 2026] [security2:error] [pid 18324:tid 18324] [client 94.76.159.220:35475] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.lamariposagallery.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.lamariposagallery.com"] [uri "/product_info.php/cPath/21_26/products_id/269"] [unique_id "avbk_vgWiQlvF1g_nuuf8QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 10:07:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 05:07:02.160059 2026] [security2:error] [pid 10860:tid 10860] [client 94.76.159.220:28115] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 05:07:02.160059 2026] [security2:error] [pid 10860:tid 10860] [client 94.76.159.220:28115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/09/17/afd-micron-31/"] [unique_id "avWPxtOy-74RUprx4cibGQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 11:27:13
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:26:59.710894 2026] [security2:error] [pid 16550:tid 16550] [client 94.76.159.220:26601] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:26:59.710894 2026] [security2:error] [pid 16550:tid 16550] [client 94.76.159.220:26601] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightningbug.farm|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/wp-json/wp/v2/categories/24"] [unique_id "avRRA7OjRttM2hXI4a1mHAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:46:18
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:46:12.099627 2026] [security2:error] [pid 8333:tid 8333] [client 94.76.159.220:45417] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:46:12.099627 2026] [security2:error] [pid 8333:tid 8333] [client 94.76.159.220:45417] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.chicagowca.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chicagowca.com"] [uri "/about.html"] [unique_id "avLZ1MXBft3ZdervzO8fiAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:00:45
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:00:38.601739 2026] [security2:error] [pid 29671:tid 29671] [client 94.76.159.220:46625] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:00:38.601739 2026] [security2:error] [pid 29671:tid 29671] [client 94.76.159.220:46625] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.donnysimonton.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.donnysimonton.com"] [uri "/2010/02/28/finally-a-real-ent/"] [unique_id "au_Jtt4-1nsQ46j51y-9mAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 01:37:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:37:52.492936 2026] [security2:error] [pid 5249:tid 5249] [client 94.76.159.220:11303] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:37:52.492936 2026] [security2:error] [pid 5249:tid 5249] [client 94.76.159.220:11303] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.doctorbalog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.doctorbalog.com"] [uri "/conditions/atrial-fibrillation/"] [unique_id "auvd8KmTLj7MNhNmp0jVTAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-02 04:00:14
UTC ·
(1 week ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-01 13:34:47
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 08:34:42.210632 2026] [security2:error] [pid 18387:tid 18387] [client 94.76.159.220:40563] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 08:34:42.210632 2026] [security2:error] [pid 18387:tid 18387] [client 94.76.159.220:40563] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/abortion/page/3/"] [unique_id "auc_8t6F431MX4owz-3fRgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-04 04:12:10
UTC ·
(1 month ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇧🇪
Saec
2026-06-23 08:15:18
UTC ·
(4 months ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (2× on saec.me)
Port Scan
Web App Attack
