|
🇦🇪
2.50.65.157
|
|
(mod_security) mod_security (id:210350) triggered by 2.50.65.157 (bba-2-50-65-157.alshamil.net.ae): ...
show more
(mod_security) mod_security (id:210350) triggered by 2.50.65.157 (bba-2-50-65-157.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:04:13.292083 2026] [security2:error] [pid 3283:tid 3283] [client 2.50.65.157:54604] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.midway-island.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.midway-island.com"] [uri "/airport-info/"] [unique_id "auquvbidDYeOcH5G2jn-iAAAAAA"], referer: https://airplanegeeks.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇰🇪
41.90.179.93
|
|
(mod_security) mod_security (id:210350) triggered by 41.90.179.93 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 41.90.179.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:04:07.090016 2026] [security2:error] [pid 29914:tid 29914] [client 41.90.179.93:1663] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||midway-island.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "midway-island.com"] [uri "/airport-info"] [unique_id "auqut-yYQtIdIhrapq9dVQAAAA8"], referer: https://airplanegeeks.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇱
201.241.40.198
|
|
(mod_security) mod_security (id:210350) triggered by 201.241.40.198 (pc-198-40-241-201.cm.vtr.net): ...
show more
(mod_security) mod_security (id:210350) triggered by 201.241.40.198 (pc-198-40-241-201.cm.vtr.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:52.855868 2026] [security2:error] [pid 19761:tid 19761] [client 201.241.40.198:60040] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "auquqEA9JMRjXa8LaZPSrAAAAAk"], referer: https://cbcfargo.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇵🇱
172.64.198.191
|
|
(mod_security) mod_security (id:210492) triggered by 172.64.198.191 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.64.198.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:39.445350 2026] [security2:error] [pid 22084:tid 22089] [client 172.64.198.191:10704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desert-automotive.ceol.us"] [uri "/.git/HEAD"] [unique_id "auqum0PIfsGlufBBP_x1RQAAAQM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇳
180.153.236.150
|
|
(mod_security) mod_security (id:210831) triggered by 180.153.236.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:39.819354 2026] [security2:error] [pid 16040:tid 16040] [client 180.153.236.150:17831] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.aim-controls.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.aim-controls.com"] [uri "/"] [unique_id "auqum51cq6wtKT1jOBofCwAAAAo"], referer: http://www.aim-controls.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
93.177.119.231
|
|
(mod_security) mod_security (id:210350) triggered by 93.177.119.231 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:36.163808 2026] [security2:error] [pid 9653:tid 9653] [client 93.177.119.231:27741] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/357"] [unique_id "auqumONwXKZ3al6IapvlsgAAACM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇿🇦
41.56.218.157
|
|
(mod_security) mod_security (id:210740) triggered by 41.56.218.157 (rain-41-56-218-157.rain.network) ...
show more
(mod_security) mod_security (id:210740) triggered by 41.56.218.157 (rain-41-56-218-157.rain.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:30.242633 2026] [security2:error] [pid 27036:tid 27036] [client 41.56.218.157:53480] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||lloydprins.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "lloydprins.com"] [uri "/robots.txt"] [unique_id "auqukr8S4uoQ_pe1eqjd7gAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
170.168.98.178
|
|
(mod_security) mod_security (id:210350) triggered by 170.168.98.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.98.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:29.377338 2026] [security2:error] [pid 14728:tid 14728] [client 170.168.98.178:52701] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/357"] [unique_id "auqukW7XN3tTtntneA5KXwAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
87.74.190.233
|
|
(mod_security) mod_security (id:210740) triggered by 87.74.190.233 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 87.74.190.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:21.157919 2026] [security2:error] [pid 3616:tid 3616] [client 87.74.190.233:42674] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||bruskiewitz.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "bruskiewitz.com"] [uri "/robots.txt"] [unique_id "auquieHI4-Nr9sDElJRyqQAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
172.70.247.237
|
|
(mod_security) mod_security (id:210492) triggered by 172.70.247.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.247.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:16.157756 2026] [security2:error] [pid 18801:tid 18801] [client 172.70.247.237:12488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.covid19.mavikalem.org"] [uri "/.env.staging"] [unique_id "auquhAqdUj8G62CYWim5MgAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
189.27.185.52
|
|
(mod_security) mod_security (id:210350) triggered by 189.27.185.52 (189.27.185.52.dynamic.adsl.gvt.n ...
show more
(mod_security) mod_security (id:210350) triggered by 189.27.185.52 (189.27.185.52.dynamic.adsl.gvt.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:12.153603 2026] [security2:error] [pid 16580:tid 16580] [client 189.27.185.52:56480] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "auqugFkhFxNXXzVqx6CgmQAAAAw"], referer: https://cbcfargo.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
157.22.17.144
|
|
(mod_security) mod_security (id:210350) triggered by 157.22.17.144 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.17.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:11.535408 2026] [security2:error] [pid 9651:tid 9651] [client 157.22.17.144:14855] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/183"] [unique_id "auquf6TqDctgSjiz1O5ZMgAAACE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
31.134.3.21
|
|
(mod_security) mod_security (id:210350) triggered by 31.134.3.21 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.3.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:03:02.312686 2026] [security2:error] [pid 9645:tid 9645] [client 31.134.3.21:61573] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/183"] [unique_id "auqudmnvrKubDWPzDfyEqgAAACA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
104.245.243.150
|
|
(mod_security) mod_security (id:210350) triggered by 104.245.243.150 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:02:41.778546 2026] [security2:error] [pid 6168:tid 6168] [client 104.245.243.150:48103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/df27e5fc4ce0012a862566c50014e89a"] [unique_id "auquYfSMlkD2m8s3h0LArwAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
167.253.17.58
|
|
(mod_security) mod_security (id:210350) triggered by 167.253.17.58 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 167.253.17.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:02:38.410860 2026] [security2:error] [pid 11530:tid 11530] [client 167.253.17.58:50203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/df27e5fc4ce0012a862566c50014e89a"] [unique_id "auquXnIImFCIwjtP76WiuAAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
181.46.137.111
|
|
(mod_security) mod_security (id:210350) triggered by 181.46.137.111 (cpe-181-46-137-111.telecentro-r ...
show more
(mod_security) mod_security (id:210350) triggered by 181.46.137.111 (cpe-181-46-137-111.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:02:25.938588 2026] [security2:error] [pid 17615:tid 17615] [client 181.46.137.111:4313] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||goldengatecorgis.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "goldengatecorgis.org"] [uri "/"] [unique_id "auquUYR7ORCUQaVJ6aH2RQAAAA0"], referer: https://lingeriexxxtubes.com/look-lt/brazzers brazzers exxtra nikkis blind taste test scene starr/15.html
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
9.249.178.133
|
|
(mod_security) mod_security (id:210730) triggered by 9.249.178.133 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 9.249.178.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:02:15.704914 2026] [security2:error] [pid 18988:tid 18988] [client 9.249.178.133:26534] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||silvermoonherbals.com|F|2"] [data ".moongoth.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "silvermoonherbals.com"] [uri "/www.moongoth.com"] [unique_id "auquR2xH_VWMEkGRYojC-QAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
186.22.94.47
|
|
(mod_security) mod_security (id:210350) triggered by 186.22.94.47 (cpe-186-22-94-47.telecentro-rever ...
show more
(mod_security) mod_security (id:210350) triggered by 186.22.94.47 (cpe-186-22-94-47.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:02:10.226627 2026] [security2:error] [pid 201306:tid 201326] [client 186.22.94.47:1992] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wizart.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wizart.org"] [uri "/conversa"] [unique_id "auquQjI5qNXobS5NnspI6AAAAVE"], referer: https://artedigital-ula.blogspot.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
138.197.154.144
|
|
(mod_security) mod_security (id:210492) triggered by 138.197.154.144 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 138.197.154.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:02:10.803402 2026] [security2:error] [pid 3563:tid 3661] [client 138.197.154.144:34448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yourwitch.com"] [uri "/.git/config"] [unique_id "auquQmjMaHcLAU14lyHbqwAAAQ8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇻🇪
38.87.248.145
|
|
(mod_security) mod_security (id:210740) triggered by 38.87.248.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 38.87.248.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:02:03.155417 2026] [security2:error] [pid 20922:tid 20922] [client 38.87.248.145:33180] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||bobbyunser.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "bobbyunser.com"] [uri "/robots.txt"] [unique_id "auquO8B8qXcF1Fl7SQmbhAAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
185.119.17.139
|
|
(mod_security) mod_security (id:217210) triggered by 185.119.17.139 (nothing.here): 1 in the last 30 ...
show more
(mod_security) mod_security (id:217210) triggered by 185.119.17.139 (nothing.here): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:01:28.891918 2026] [security2:error] [pid 272165:tid 272188] [client 185.119.17.139:59162] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||ipee.pw:443|F|4"] [data "CONNECT ipee.pw:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ipee.pw"] [uri "/"] [unique_id "auquGMs95wFEyHijgAMt3AAAAJU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
17.166.25.214
|
|
(mod_security) mod_security (id:225170) triggered by 17.166.25.214 (17-166-25-214.applebot.apple.com ...
show more
(mod_security) mod_security (id:225170) triggered by 17.166.25.214 (17-166-25-214.applebot.apple.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:01:20.164971 2026] [security2:error] [pid 22570:tid 22570] [client 17.166.25.214:55992] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pleaseaddbacon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pleaseaddbacon.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "auquEJ7UgpGCDKi8jyEcUQAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
2a03:2880:f800:45::
|
|
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:45:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:45:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:01:08.493740 2026] [security2:error] [pid 2631:tid 2631] [client 2a03:2880:f800:45:::42620] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||raynernet.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "raynernet.com"] [uri "/raynernet.com"] [unique_id "auquBIFYcE4ibg6GrdIGHAAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
201.79.59.182
|
|
(mod_security) mod_security (id:210492) triggered by 201.79.59.182 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 201.79.59.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:01:10.222273 2026] [security2:error] [pid 19719:tid 19719] [client 201.79.59.182:43998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zavion.com"] [uri "/.git/config"] [unique_id "auquBsexzDkMWsK8hL_8QwAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
91.132.124.205
|
|
(mod_security) mod_security (id:210350) triggered by 91.132.124.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 91.132.124.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:01:04.168441 2026] [security2:error] [pid 8244:tid 8244] [client 91.132.124.205:46655] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.passwordresearch.com"] [uri "/core.html"] [unique_id "auquAAbK8WXFnFdLeQWmtgAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|