|
🇷🇺
212.94.24.30
|
|
(mod_security) mod_security (id:225170) triggered by 212.94.24.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 212.94.24.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:50:17.826756 2026] [security2:error] [pid 13312:tid 13312] [client 212.94.24.30:37674] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||holgerfeld.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "holgerfeld.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjuc2Ks_k6N3ZR0IwseAAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
179.254.48.217
|
|
(mod_security) mod_security (id:225170) triggered by 179.254.48.217 (179-254-48-217.user3p.v-tal.net ...
show more
(mod_security) mod_security (id:225170) triggered by 179.254.48.217 (179-254-48-217.user3p.v-tal.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:50:14.843014 2026] [security2:error] [pid 18736:tid 18736] [client 179.254.48.217:41811] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ixdnet.deubellzebub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ixdnet.deubellzebub.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjtmkfZEDhrmdCqUkquQAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.74.106.129
|
|
(mod_security) mod_security (id:210730) triggered by 34.74.106.129 (129.106.74.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.74.106.129 (129.106.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:50:09.526314 2026] [security2:error] [pid 29071:tid 29071] [client 34.74.106.129:53838] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mongo.diarrheawolves.com|F|2"] [data ".diarrheawolves.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mongo.diarrheawolves.com"] [uri "/z9x8c7v6b5-debug-trigger-mongo.diarrheawolves.com"] [unique_id "aurjsV7c-94-FA83oLRRLQAAABQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
181.45.213.117
|
|
(mod_security) mod_security (id:210350) triggered by 181.45.213.117 (cpe-181-45-213-117.telecentro-r ...
show more
(mod_security) mod_security (id:210350) triggered by 181.45.213.117 (cpe-181-45-213-117.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:50:09.700367 2026] [security2:error] [pid 29059:tid 29069] [client 181.45.213.117:47444] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kyrameadows.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kyrameadows.com"] [uri "/"] [unique_id "aurjsbzaG6hKLEWLsvQ4KAAAAIQ"], referer: https://love-spells-magic.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇹🇳
197.238.34.146
|
|
(mod_security) mod_security (id:210350) triggered by 197.238.34.146 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 197.238.34.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:50:07.995528 2026] [security2:error] [pid 1263:tid 1263] [client 197.238.34.146:53384] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "aurjr9Gyrc21hOwLHaYhpQAAABs"], referer: https://cbcfargo.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
191.84.199.97
|
|
(mod_security) mod_security (id:225170) triggered by 191.84.199.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 191.84.199.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:50:06.574038 2026] [security2:error] [pid 10682:tid 10682] [client 191.84.199.97:46486] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||customhumanrobots.internetnameregistration.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "customhumanrobots.internetnameregistration.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aurjrvu7jMlTWdgkE7KpoAAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇱🇺
85.94.230.144
|
|
(mod_security) mod_security (id:225170) triggered by 85.94.230.144 (cust-85.94.230.144.orange.lu): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 85.94.230.144 (cust-85.94.230.144.orange.lu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:50:01.521505 2026] [security2:error] [pid 18697:tid 18697] [client 85.94.230.144:3744] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ixdnet.deubellzebub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ixdnet.deubellzebub.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjqW0iF7VKqR1qxNgvMgAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇴🇲
5.36.60.174
|
|
(mod_security) mod_security (id:225170) triggered by 5.36.60.174 (5.36.60.174.dynamic-dsl-ip.omantel ...
show more
(mod_security) mod_security (id:225170) triggered by 5.36.60.174 (5.36.60.174.dynamic-dsl-ip.omantel.net.om): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:58.789006 2026] [security2:error] [pid 21677:tid 21763] [client 5.36.60.174:51840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||munatseng.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "munatseng.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjptthx5YX5Pr6X8mRxgAAAdg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
184.146.192.188
|
|
(mod_security) mod_security (id:210730) triggered by 184.146.192.188 (bras-base-toroon4223w-grc-20-1 ...
show more
(mod_security) mod_security (id:210730) triggered by 184.146.192.188 (bras-base-toroon4223w-grc-20-184-146-192-188.dsl.bell.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:59.489902 2026] [security2:error] [pid 21677:tid 21754] [client 184.146.192.188:55726] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||condo.management|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "condo.management"] [uri "/contact/enlan.com"] [unique_id "aurjp9thx5YX5Pr6X8mRxwAAAc8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇩
103.170.172.27
|
|
(mod_security) mod_security (id:225170) triggered by 103.170.172.27 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.170.172.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:54.846267 2026] [security2:error] [pid 21677:tid 21743] [client 103.170.172.27:32932] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||munatseng.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "munatseng.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjotthx5YX5Pr6X8mRwgAAAcQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇲🇾
115.135.198.246
|
|
(mod_security) mod_security (id:225170) triggered by 115.135.198.246 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 115.135.198.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:54.279604 2026] [security2:error] [pid 18420:tid 18420] [client 115.135.198.246:20494] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ixdnet.deubellzebub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ixdnet.deubellzebub.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjotY_UMXCVkIY2DGArQAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
76.34.125.136
|
|
(mod_security) mod_security (id:210730) triggered by 76.34.125.136 (syn-076-034-125-136.res.spectrum ...
show more
(mod_security) mod_security (id:210730) triggered by 76.34.125.136 (syn-076-034-125-136.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:52.675984 2026] [security2:error] [pid 21676:tid 21715] [client 76.34.125.136:29999] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||condo.management|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "condo.management"] [uri "/contact/enlan.com"] [unique_id "aurjoIE7VTxGrj666U6P5QAAAYM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
67.183.171.52
|
|
(mod_security) mod_security (id:210730) triggered by 67.183.171.52 (c-67-183-171-52.hsd1.wa.comcast. ...
show more
(mod_security) mod_security (id:210730) triggered by 67.183.171.52 (c-67-183-171-52.hsd1.wa.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:51.483136 2026] [security2:error] [pid 21675:tid 21696] [client 67.183.171.52:60931] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||condo.management|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "condo.management"] [uri "/contact/enlan.com"] [unique_id "aurjnzzi4DbfklJsp3ky9wAAAQ0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇿
185.146.115.252
|
|
(mod_security) mod_security (id:225170) triggered by 185.146.115.252 (252-dynamic-ip.katv1-dot-net): ...
show more
(mod_security) mod_security (id:225170) triggered by 185.146.115.252 (252-dynamic-ip.katv1-dot-net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:49.666831 2026] [security2:error] [pid 12976:tid 12976] [client 185.146.115.252:16055] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||holgerfeld.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "holgerfeld.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aurjnf97UoY0XVsjSwMYsAAAACE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇵🇱
172.68.159.10
|
|
(mod_security) mod_security (id:210492) triggered by 172.68.159.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:51.620166 2026] [security2:error] [pid 23416:tid 23416] [client 172.68.159.10:9450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "probeanalysis.com.afjm.net"] [uri "/.git/config"] [unique_id "aurjn3JsrBzDViWEmiWvhwAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
73.163.81.104
|
|
(mod_security) mod_security (id:210730) triggered by 73.163.81.104 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 73.163.81.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:46.392310 2026] [security2:error] [pid 21676:tid 21726] [client 73.163.81.104:47125] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||condo.management|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "condo.management"] [uri "/contact/enlan.com"] [unique_id "aurjmoE7VTxGrj666U6PywAAAY4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇩
182.252.75.55
|
|
(mod_security) mod_security (id:225170) triggered by 182.252.75.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 182.252.75.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:41.089646 2026] [security2:error] [pid 16934:tid 16934] [client 182.252.75.55:51880] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ixdnet.deubellzebub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ixdnet.deubellzebub.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjlfDsgfn7YpLvJVmPQgAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
181.46.38.172
|
|
(mod_security) mod_security (id:210350) triggered by 181.46.38.172 (cpe-181-46-38-172.telecentro-rev ...
show more
(mod_security) mod_security (id:210350) triggered by 181.46.38.172 (cpe-181-46-38-172.telecentro-reversos.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:41.459292 2026] [security2:error] [pid 1348:tid 1348] [client 181.46.38.172:40380] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modelengines.info|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modelengines.info"] [uri "/'"] [unique_id "aurjlSJP5SWIe-x4Nt9QdgAAAAw"], referer: https://paddleducks.co.uk/smf/index.php?msg=32400
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
168.195.160.94
|
|
(mod_security) mod_security (id:225170) triggered by 168.195.160.94 (168.195.160-094.infinito.net.br ...
show more
(mod_security) mod_security (id:225170) triggered by 168.195.160.94 (168.195.160-094.infinito.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:26.729137 2026] [security2:error] [pid 24654:tid 24654] [client 168.195.160.94:42532] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sarrisbilliards.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sarrisbilliards.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjhrKlnDcokx3oq71FPAAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
104.245.243.209
|
|
(mod_security) mod_security (id:210350) triggered by 104.245.243.209 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:08.920298 2026] [security2:error] [pid 16822:tid 16822] [client 104.245.243.209:16475] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2017/03/06/an-unprecedented-deluge-of-vital-regulation-rollbacks/"] [unique_id "aurjdHcqd_mbq_nrV5WoYgAAADQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇽🇰
185.179.30.129
|
|
(mod_security) mod_security (id:225170) triggered by 185.179.30.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.179.30.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:15.909093 2026] [security2:error] [pid 13759:tid 13759] [client 185.179.30.129:56316] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sandpointidaho.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sandpointidaho.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjeyqjcErto6VVM0_86QAAADc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
46.253.131.91
|
|
(mod_security) mod_security (id:210350) triggered by 46.253.131.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 46.253.131.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:15.129711 2026] [security2:error] [pid 16824:tid 16824] [client 46.253.131.91:9295] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2017/03/06/an-unprecedented-deluge-of-vital-regulation-rollbacks/"] [unique_id "aurje4CPWRpqSVm8YjuxVgAAADY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇹🇼
34.80.233.10
|
|
(mod_security) mod_security (id:210730) triggered by 34.80.233.10 (10.233.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.233.10 (10.233.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:17.533032 2026] [security2:error] [pid 13577:tid 13577] [client 34.80.233.10:47790] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||xirination.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "xirination.com"] [uri "/z9x8c7v6b5-debug-trigger-xirination.com"] [unique_id "aurjff2PRUWmPWB98JPSPAAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇶
169.224.4.102
|
|
(mod_security) mod_security (id:225170) triggered by 169.224.4.102 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 169.224.4.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:12.470070 2026] [security2:error] [pid 14728:tid 14728] [client 169.224.4.102:27820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sandpointidaho.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sandpointidaho.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjeADxKMFVI7eDL4TEgwAAAC8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇳
152.59.57.76
|
|
(mod_security) mod_security (id:225170) triggered by 152.59.57.76 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 152.59.57.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 02:49:05.167928 2026] [security2:error] [pid 21469:tid 21469] [client 152.59.57.76:49900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sarrisbilliards.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sarrisbilliards.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aurjcWbkfXR60ov7hT-oMgAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|