🇺🇸
TPI-Abuse
2026-11-09 13:49:14
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:49:09.911303 2026] [security2:error] [pid 8040:tid 8040] [client 94.76.159.34:11277] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:49:09.911303 2026] [security2:error] [pid 8040:tid 8040] [client 94.76.159.34:11277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fiasdesigns.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fiasdesigns.com"] [uri "/giveaway/giveaway-for-custom-art-package/"] [unique_id "avHPVTJTdefbbhMFbyWAxQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 03:26:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:26:37.952962 2026] [security2:error] [pid 32224:tid 32224] [client 94.76.159.34:64191] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:26:37.952962 2026] [security2:error] [pid 32224:tid 32224] [client 94.76.159.34:64191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.capefearastro.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.capefearastro.org"] [uri "/"] [unique_id "auv3beq5QT3C7KD_ZstGagAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-02 23:03:05
UTC ·
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-01.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-02 13:31:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:31:15.809047 2026] [security2:error] [pid 10569:tid 10569] [client 94.76.159.34:55701] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:31:15.809047 2026] [security2:error] [pid 10569:tid 10569] [client 94.76.159.34:55701] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/world-war-i/page/2/"] [unique_id "auiQo9SynZ7DzejZdOUJTAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-11-02 00:05:24
UTC ·
(1 week ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 17:06:21
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:06:15.250275 2026] [security2:error] [pid 32736:tid 32736] [client 94.76.159.34:55183] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:06:15.250275 2026] [security2:error] [pid 32736:tid 32736] [client 94.76.159.34:55183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/rotary-rewind/rotary-rewind-feb-3-2021/"] [unique_id "auIrh34vT9H0raMlyFKgKAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 14:10:20
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:10:15.222472 2026] [security2:error] [pid 16385:tid 16385] [client 94.76.159.34:45453] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:10:15.222472 2026] [security2:error] [pid 16385:tid 16385] [client 94.76.159.34:45453] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||johnandrews.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "johnandrews.net"] [uri "/"] [unique_id "atjHx4w3NcKS4I1fjOxPowAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 09:04:44
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 05:04:37.974858 2026] [security2:error] [pid 17468:tid 17478] [client 94.76.159.34:64263] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.159.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 05:04:37.974858 2026] [security2:error] [pid 17468:tid 17478] [client 94.76.159.34:64263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||linfoulk.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "linfoulk.org"] [uri "/solo_horn/index.html"] [unique_id "atiAJZFc8RWs19PWMCNkOgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-18 18:29:56
UTC ·
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇨🇭
backslash
2026-09-02 12:36:00
UTC ·
(2 months ago)
probe wp2shell
Web App Attack
🇷🇺
OK
2026-08-31 21:05:07
UTC ·
(2 months ago)
HTTP/HTTPS
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-31 15:16:56
UTC ·
(2 months ago)
[31/Aug/2026:18:16:56 +0300] -- 94.76.159.34 Ban reason: User-Agent curl/
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-05-19 14:29:43
UTC ·
(5 months ago)
Wordpress login attempts
Brute-Force
🇩🇪
kjaerulff
2026-05-18 06:54:05
UTC ·
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
