🇺🇸
TPI-Abuse
2026-11-15 16:27:09
UTC ·
(10 minutes ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:27:03.146202 2026] [security2:error] [pid 26621:tid 26621] [client 122.8.92.210:47227] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 11:27:03.146202 2026] [security2:error] [pid 26621:tid 26621] [client 122.8.92.210:47227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.losbarbarosdelnorte.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.losbarbarosdelnorte.com"] [uri "/politica-local/es-usted-pirrurris/"] [unique_id "avndV8gqMyydSXh5zmfFLwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 04:34:01
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:33:57.502468 2026] [security2:error] [pid 4921:tid 4921] [client 122.8.92.210:18439] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:33:57.502468 2026] [security2:error] [pid 4921:tid 4921] [client 122.8.92.210:18439] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/HermanMiller/Embody-Chair/Embody-Chair-Charcoal-Rhythm-White-Frame-Titanium-Base.htm"] [unique_id "avPwNcmBWRwp0oC6UlB5UAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-11-06 15:27:24
UTC ·
(1 week ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-28 17:04:18
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:04:10.980150 2026] [security2:error] [pid 3408:tid 3408] [client 122.8.92.210:41535] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:04:10.980150 2026] [security2:error] [pid 3408:tid 3408] [client 122.8.92.210:41535] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.arofish.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.arofish.us"] [uri "/pricelist.html"] [unique_id "auIrCqg65eMmcQeLLaWgBwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-04 04:10:36
UTC ·
(1 month ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-08-13 15:29:59
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 122.8.92.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 11:29:53.064815 2026] [security2:error] [pid 16797:tid 16797] [client 122.8.92.210:50333] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 122.8.92.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 11:29:53.064815 2026] [security2:error] [pid 16797:tid 16797] [client 122.8.92.210:50333] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.flavornet.org|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.flavornet.org"] [uri "/info/jmol/pdb/168564-54-3.pdb"] [unique_id "an3i8SJf1RQBpl3lbsjwVAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-02-07 17:12:28
UTC ·
(9 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-01-18 09:30:17
UTC ·
(9 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.92.210 (FI/Finland/-): 1 in the last 3600 secs (0-195)
Hacking
🇫🇷
masterguru
2026-01-07 09:42:31
UTC ·
(10 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 122.8.92.210 (SE/Sweden/-): 1 in the last 3600 secs (0-195)
Hacking
🇧🇪
voormedia
2025-12-17 12:46:44
UTC ·
(10 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇨🇦
SSH-Admin
2025-12-01 02:33:03
UTC ·
(11 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-21 07:15:42
UTC ·
(11 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
2025-09-02 17:52:35
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
