|
🇨🇱
191.112.242.77
|
|
(mod_security) mod_security (id:210350) triggered by 191.112.242.77 (191-112-242-77.baf.movistar.cl) ...
show more
(mod_security) mod_security (id:210350) triggered by 191.112.242.77 (191-112-242-77.baf.movistar.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:19.712814 2026] [security2:error] [pid 28696:tid 28696] [client 191.112.242.77:36814] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||partybussantafe.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "partybussantafe.com"] [uri "/"] [unique_id "auOZK6DU4HgTJiCyQ_KSQwAAAAA"], referer: https://five.co.in/redirect.php?ref_host=whitsonaccidentattorneys.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
177.10.5.202
|
|
(mod_security) mod_security (id:210350) triggered by 177.10.5.202 (177-10-5-202.cleannet.com.br): 1 ...
show more
(mod_security) mod_security (id:210350) triggered by 177.10.5.202 (177-10-5-202.cleannet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:15.990042 2026] [security2:error] [pid 7788:tid 7788] [client 177.10.5.202:44020] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sfee.info|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sfee.info"] [uri "/"] [unique_id "auOZJ9PkZaMqA-4yDyzf9QAAAAs"], referer: https://five.co.in/redirect.php?ref_host=nexusattorneys.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇴
186.116.223.73
|
|
(mod_security) mod_security (id:210350) triggered by 186.116.223.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 186.116.223.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:18.129892 2026] [security2:error] [pid 4996:tid 4996] [client 186.116.223.73:40578] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||permaetch.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "permaetch.com"] [uri "/"] [unique_id "auOZKmNs38aGDQiEV4aakgAAAAo"], referer: https://anytimesign.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
186.247.243.141
|
|
(mod_security) mod_security (id:210350) triggered by 186.247.243.141 (186-247-243-141.user3p.vtal.ne ...
show more
(mod_security) mod_security (id:210350) triggered by 186.247.243.141 (186-247-243-141.user3p.vtal.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:19.542691 2026] [security2:error] [pid 7980:tid 7980] [client 186.247.243.141:52966] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||personalizedweddingnapkins.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "personalizedweddingnapkins.net"] [uri "/"] [unique_id "auOZK-TjvI0e2s6NDZmPuwAAAAk"], referer: https://five.co.in/redirect.php?ref_host=lacrossefreak.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇵
110.44.115.203
|
|
(mod_security) mod_security (id:210350) triggered by 110.44.115.203 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 110.44.115.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:18.763551 2026] [security2:error] [pid 16453:tid 16584] [client 110.44.115.203:43247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jonneher.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jonneher.com"] [uri "/cgi-bin"] [unique_id "auOZKjLHcvMe0O4x2O3l-gAAAEw"], referer: https://jonneher.com/cgi-bin
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇩
103.186.238.187
|
|
(mod_security) mod_security (id:210350) triggered by 103.186.238.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 103.186.238.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:13.695192 2026] [security2:error] [pid 11973:tid 12093] [client 103.186.238.187:34694] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jd-web-designs.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jd-web-designs.com"] [uri "/403.shtml"] [unique_id "auOZJdTbJJzNqBQhEPUsgQAAAcA"], referer: https://hawk-av.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇲🇾
27.125.249.38
|
|
(mod_security) mod_security (id:225170) triggered by 27.125.249.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 27.125.249.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:14.596981 2026] [security2:error] [pid 5768:tid 5768] [client 27.125.249.38:40106] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nccb.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nccb.org"] [uri "/wp-json/wp/v2/users"] [unique_id "auOZJvl9DpnDrFdh9dM-bAAAABc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
88.218.45.111
|
|
(mod_security) mod_security (id:210350) triggered by 88.218.45.111 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.45.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:16.374609 2026] [security2:error] [pid 27360:tid 27360] [client 88.218.45.111:47807] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.passwordresearch.com"] [uri "/papers/paper78.html"] [unique_id "auOZKGCBI8XEOmrUqVafqwAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
168.196.88.244
|
|
(mod_security) mod_security (id:210350) triggered by 168.196.88.244 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 168.196.88.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:11.372963 2026] [security2:error] [pid 21740:tid 21756] [client 168.196.88.244:31582] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paylessformedicine.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paylessformedicine.com"] [uri "/"] [unique_id "auOZI5u877dg9aOjQRNFpwAAAIk"], referer: https://five.co.in/redirect.php?ref_host=schoolneuro.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇱
186.189.89.243
|
|
(mod_security) mod_security (id:210350) triggered by 186.189.89.243 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 186.189.89.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:13.246517 2026] [security2:error] [pid 4407:tid 4407] [client 186.189.89.243:32289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||compupackinc.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "compupackinc.com"] [uri "/"] [unique_id "auOZJUGrgyn_HASU-kQS5AAAABY"], referer: https://five.co.in/redirect.php?ref_host=nicohauff.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇨
157.100.184.22
|
|
(mod_security) mod_security (id:210350) triggered by 157.100.184.22 (host-157-100-184-22.ecua.net.ec ...
show more
(mod_security) mod_security (id:210350) triggered by 157.100.184.22 (host-157-100-184-22.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:10.866522 2026] [security2:error] [pid 11969:tid 12155] [client 157.100.184.22:35432] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jd-web-designs.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jd-web-designs.com"] [uri "/"] [unique_id "auOZImSGWqyZhdGyhJ6vogAAAQc"], referer: https://hawk-av.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇵🇭
113.19.183.208
|
|
(mod_security) mod_security (id:225170) triggered by 113.19.183.208 (113.19.183.208.convergeict.com) ...
show more
(mod_security) mod_security (id:225170) triggered by 113.19.183.208 (113.19.183.208.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:09.725981 2026] [security2:error] [pid 6847:tid 6847] [client 113.19.183.208:7793] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nccb.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nccb.org"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "auOZIZEGkjdUx5aSRd4TDgAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇨
157.100.106.242
|
|
(mod_security) mod_security (id:225170) triggered by 157.100.106.242 (host-157-100-106-242.ecua.net. ...
show more
(mod_security) mod_security (id:225170) triggered by 157.100.106.242 (host-157-100-106-242.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:07.979033 2026] [security2:error] [pid 25184:tid 25184] [client 157.100.106.242:54422] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kmindonesia.com.kairoslogammakmur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kmindonesia.com.kairoslogammakmur.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auOZH1UjFrdmLzvyzYqs1AAAABg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇳
124.131.223.142
|
|
(mod_security) mod_security (id:225170) triggered by 124.131.223.142 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 124.131.223.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:09.174521 2026] [security2:error] [pid 10030:tid 10030] [client 124.131.223.142:5190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kimbrothersduluth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kimbrothersduluth.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auOZIXkmbiVQfTaGYcnkJQAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
143.0.171.29
|
|
(mod_security) mod_security (id:210350) triggered by 143.0.171.29 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 143.0.171.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:08.019032 2026] [security2:error] [pid 16453:tid 16591] [client 143.0.171.29:59186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hotairwelder.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hotairwelder.com"] [uri "/403.shtml"] [unique_id "auOZIDLHcvMe0O4x2O3l8QAAAFM"], referer: https://five.co.in/redirect.php?ref_host=guestkeeper.xyz
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇩
103.244.49.201
|
|
(mod_security) mod_security (id:210350) triggered by 103.244.49.201 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 103.244.49.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:06.359505 2026] [security2:error] [pid 18844:tid 18844] [client 103.244.49.201:47976] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tylercomputing.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tylercomputing.com"] [uri "/"] [unique_id "auOZHlbMuy-ODGn1x_wIuwAAAAA"], referer: https://five.co.in/redirect.php?ref_host=guestwifihotspot.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇲🇦
45.219.208.85
|
|
(mod_security) mod_security (id:210350) triggered by 45.219.208.85 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.219.208.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:08.156928 2026] [security2:error] [pid 27657:tid 27657] [client 45.219.208.85:51578] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thepercussionworks.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thepercussionworks.com"] [uri "/instrument-rentals/"] [unique_id "auOZIPWEyBvGaAWTUYsjwAAAACE"], referer: https://thepercussionworks.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇱
181.42.20.94
|
|
(mod_security) mod_security (id:210350) triggered by 181.42.20.94 (z293.entelchile.net): 1 in the la ...
show more
(mod_security) mod_security (id:210350) triggered by 181.42.20.94 (z293.entelchile.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:05.037474 2026] [security2:error] [pid 16450:tid 16552] [client 181.42.20.94:9186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hotairwelder.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotairwelder.com"] [uri "/"] [unique_id "auOZHfFYQq7ExuZBBPFFJAAAAIs"], referer: https://five.co.in/redirect.php?ref_host=guestkeeper.xyz
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇴
181.235.169.241
|
|
(mod_security) mod_security (id:225170) triggered by 181.235.169.241 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 181.235.169.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:07.191948 2026] [security2:error] [pid 433:tid 433] [client 181.235.169.241:39470] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brbcash.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brbcash.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auOZH-AlalE13hLhqB5IaQAAABA"], referer: https://brbcash.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
168.90.17.194
|
|
(mod_security) mod_security (id:210350) triggered by 168.90.17.194 (194.17.90.168.playboxinformatica ...
show more
(mod_security) mod_security (id:210350) triggered by 168.90.17.194 (194.17.90.168.playboxinformatica.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:03.266877 2026] [security2:error] [pid 11728:tid 11728] [client 168.90.17.194:12090] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fundingworkingcapital.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fundingworkingcapital.com"] [uri "/small-business-startup-loans-no-credit-check/"] [unique_id "auOZG4mEO0hK-nZCoDn9hgAAAAY"], referer: https://constructionloansfunding.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
177.70.93.139
|
|
(mod_security) mod_security (id:210350) triggered by 177.70.93.139 (139.93.70.177.in-addr.arpa.veroi ...
show more
(mod_security) mod_security (id:210350) triggered by 177.70.93.139 (139.93.70.177.in-addr.arpa.verointernet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:01.929203 2026] [security2:error] [pid 11772:tid 11772] [client 177.70.93.139:57729] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.energycapitalinvestments.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.energycapitalinvestments.com"] [uri "/investors/"] [unique_id "auOZGVpJSFXMAVCfFJxZsgAAABo"], referer: https://holgerfeld.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇩
180.149.232.174
|
|
(mod_security) mod_security (id:210350) triggered by 180.149.232.174 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 180.149.232.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:03.828697 2026] [security2:error] [pid 23988:tid 23988] [client 180.149.232.174:56284] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||honorherwish.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "honorherwish.org"] [uri "/"] [unique_id "auOZGyh5WjxnrfNykT0bBgAAABQ"], referer: https://analyticshaven.top/stats/70346
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
138.59.131.164
|
|
(mod_security) mod_security (id:210350) triggered by 138.59.131.164 (ip-138.59.131-164.seanet.com.br ...
show more
(mod_security) mod_security (id:210350) triggered by 138.59.131.164 (ip-138.59.131-164.seanet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:01.076273 2026] [security2:error] [pid 5758:tid 5758] [client 138.59.131.164:5157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||feaverslane.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "feaverslane.com"] [uri "/"] [unique_id "auOZGbxbzpxbKB8QusRsQgAAAAk"], referer: https://five.co.in/redirect.php?ref_host=garrbo.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇴
181.234.71.122
|
|
(mod_security) mod_security (id:210350) triggered by 181.234.71.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 181.234.71.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:06:02.998885 2026] [security2:error] [pid 22289:tid 22289] [client 181.234.71.122:35890] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thepercussionworks.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thepercussionworks.com"] [uri "/instrument-rentals"] [unique_id "auOZGs4BHQ9TRK1wBdlwZAAAABA"], referer: https://thepercussionworks.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇹🇷
176.235.182.145
|
|
(mod_security) mod_security (id:225170) triggered by 176.235.182.145 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 176.235.182.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:05:59.725150 2026] [security2:error] [pid 28067:tid 28067] [client 176.235.182.145:51874] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brbcash.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brbcash.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auOZF0MbQvVJVGwCyGiQwAAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|