🇺🇸
TPI-Abuse
2026-11-14 14:15:20
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:15:13.447595 2026] [security2:error] [pid 13110:tid 13127] [client 94.76.169.193:24591] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:15:13.447595 2026] [security2:error] [pid 13110:tid 13127] [client 94.76.169.193:24591] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/bhomeomorphismz2949156"] [unique_id "avhs8ZriFmwE_WyE8kRzGQAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 19:34:33
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:34:29.747450 2026] [security2:error] [pid 12134:tid 12134] [client 94.76.169.193:47475] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:34:29.747450 2026] [security2:error] [pid 12134:tid 12134] [client 94.76.169.193:47475] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Gilfix, Matthew Ellison obit 2008.htm"] [unique_id "avTDRdlWo5pIR8uJWtV88gAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:50:49
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:50:44.780339 2026] [security2:error] [pid 1417:tid 1417] [client 94.76.169.193:22281] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:50:44.780339 2026] [security2:error] [pid 1417:tid 1417] [client 94.76.169.193:22281] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cortona.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cortona.ws"] [uri "/palazzo_sernini_it.html"] [unique_id "avHdxFNmc4DBairSrfUgzQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 23:42:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:42:04.249916 2026] [security2:error] [pid 3028:tid 3028] [client 94.76.169.193:59323] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 18:42:04.249916 2026] [security2:error] [pid 3028:tid 3028] [client 94.76.169.193:59323] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onward.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/Catalina-470/Catalina-470-Info.html"] [unique_id "au0UTCxnsoiZQtlEMqr6HgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 05:29:16
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:28:54.459306 2026] [security2:error] [pid 21908:tid 21908] [client 94.76.169.193:42207] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:28:54.459306 2026] [security2:error] [pid 21908:tid 21908] [client 94.76.169.193:42207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paleopathologist.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paleopathologist.com"] [uri "/fitness/how-to-build-an-inexpensive-shoulderrotator-cuff-exerciser/"] [unique_id "aulxFkfvRENOZAwApUofbgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 10:32:56
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 06:32:51.533242 2026] [security2:error] [pid 16130:tid 16130] [client 94.76.169.193:40191] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 06:32:51.533242 2026] [security2:error] [pid 16130:tid 16130] [client 94.76.169.193:40191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.markaandrews.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.markaandrews.com"] [uri "/2012/12/17/gun-control-begins-at-home/"] [unique_id "auXD0xwWYmzvo8jKzpxMvAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:19:02
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:18:54.339210 2026] [security2:error] [pid 32281:tid 32281] [client 94.76.169.193:55395] M ...
show more
(mod_security) mod_security (id:210350) triggered by 94.76.169.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:18:54.339210 2026] [security2:error] [pid 32281:tid 32281] [client 94.76.169.193:55395] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||contractorspecializing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "contractorspecializing.com"] [uri "/flooring_info.htm"] [unique_id "auJmvuX75oFdz8T9hSukbAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-05-26 20:45:12
UTC ·
(5 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇦🇺
AWW-Admin
2026-05-26 14:55:26
UTC ·
(5 months ago)
(wordpress) Failed wordpress login from 94.76.169.193 (ES/Spain/-)
Brute-Force
🇺🇸
octageeks.com
2026-05-26 04:06:50
UTC ·
(5 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
lostswordfish.com
2026-05-23 05:38:03
UTC ·
(5 months ago)
Wordfence waf block on fypeducation
Web App Attack
🇲🇽
octageeks.com
2026-05-23 04:11:50
UTC ·
(5 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
dtorrer
2026-05-23 02:22:08
UTC ·
(5 months ago)
Brute-force general attack.
Brute-Force
