🇺🇸
TPI-Abuse
2026-06-14 18:44:31
(11 hours ago)
(mod_security) mod_security (id:210831) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 14:44:24.333234 2026] [security2:error] [pid 24440:tid 24440] [client 120.84.9.154:52111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.aabondwnc.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.aabondwnc.com"] [uri "/index.html"] [unique_id "ai72iPlVziyCa1c5jNcw_wAAAAc"], referer: http://www.aabondwnc.com/index.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 19:58:14
(1 month ago)
(mod_security) mod_security (id:210831) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 15:58:05.681967 2026] [security2:error] [pid 3624:tid 3624] [client 120.84.9.154:52102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.goldencalculator.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.goldencalculator.com"] [uri "/"] [unique_id "agYpTQS20Ua_KZywKRBFgAAAAAs"], referer: http://www.goldencalculator.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-25 20:32:57
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 16:32:49.247363 2025] [security2:error] [pid 10439:tid 10439] [client 120.84.9.154:56929] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1914/game/71046/"] [unique_id "aNWm8W9NrBFZdnnVrKbzVwAAACc"], referer: https://www.renju.net/game/71046/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-23 13:57:34
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 09:57:26.941404 2025] [security2:error] [pid 32523:tid 32523] [client 120.84.9.154:63733] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/2661/"] [unique_id "aNKnRpqGrxzCBQdE-iilHwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-21 18:40:12
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 14:40:06.330868 2025] [security2:error] [pid 15151:tid 15151] [client 120.84.9.154:57238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/702/game/21365"] [unique_id "aNBGhrHXz7mw389NgNmmwQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-15 01:43:49
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 120.84.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 21:42:34.527127 2025] [security2:error] [pid 6974:tid 6974] [client 120.84.9.154:12617] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/159680"] [unique_id "aMdvCt65IQaCvrshRc38YAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
marzzzello
2025-07-18 02:29:16
(10 months ago)
Ports: 19x 22029
Port Scan
🇿🇦
IrisFlower
2023-05-06 20:47:54
(3 years ago)
Unauthorized connection attempt detected from IP address 120.84.9.154 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2023-05-06 20:10:33
(3 years ago)
Unauthorized connection attempt detected from IP address 120.84.9.154 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2023-05-05 20:29:35
(3 years ago)
Unauthorized connection attempt detected from IP address 120.84.9.154 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2023-05-05 20:28:17
(3 years ago)
Unauthorized connection attempt detected from IP address 120.84.9.154 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2023-05-05 20:14:50
(3 years ago)
Unauthorized connection attempt detected from IP address 120.84.9.154 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2023-05-04 20:07:15
(3 years ago)
Unauthorized connection attempt detected from IP address 120.84.9.154 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2021-12-07 07:56:57
(4 years ago)
Unauthorized connection attempt detected from IP address 120.84.9.154 to port 443 [J]
Port Scan
Hacking