🇺🇸
TPI-Abuse
2026-11-06 08:30:56
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:30:49.637374 2026] [security2:error] [pid 14735:tid 14735] [client 122.8.92.73:37767] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:30:49.637374 2026] [security2:error] [pid 14735:tid 14735] [client 122.8.92.73:37767] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||home.agingworkforcenews.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "home.agingworkforcenews.com"] [uri "/aginglinks.html"] [unique_id "au2QOW1-tVfVZs6HL7GJ-AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 07:03:36
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:03:31.193798 2026] [security2:error] [pid 22227:tid 22227] [client 122.8.92.73:32931] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:03:31.193798 2026] [security2:error] [pid 22227:tid 22227] [client 122.8.92.73:32931] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/10/02/tax-avoidance-is-a-corruption-that-impoverishes/"] [unique_id "auWSwwUIU5bp3gtTFM2v_wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 17:03:22
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:03:19.033644 2026] [security2:error] [pid 17151:tid 17288] [client 122.8.92.73:19237] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:03:19.033644 2026] [security2:error] [pid 17151:tid 17288] [client 122.8.92.73:19237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dubarch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dubarch.com"] [uri "/awstats/"] [unique_id "at-H1587_9kW8qdvoS9thwAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
YF
2026-10-26 01:05:20
UTC ·
(1 week ago)
Malicious web activity confirmed — IP previously flagged as suspicious (automated re-check, score: 20%)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 20:10:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:10:37.123923 2026] [security2:error] [pid 18416:tid 18416] [client 122.8.92.73:48059] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:10:37.123923 2026] [security2:error] [pid 18416:tid 18416] [client 122.8.92.73:48059] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mountararattrek.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mountararattrek.com"] [uri "/turkeytours.htm"] [unique_id "atfKvZwVoTuzW7-V0GFtAQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
DonAtari
2026-10-16 04:33:51
UTC ·
(3 weeks ago)
DShield firewall scan - TCP to port 8080
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-10-15 14:04:08
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:04:04.671624 2026] [security2:error] [pid 18060:tid 18060] [client 122.8.92.73:10031] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:04:04.671624 2026] [security2:error] [pid 18060:tid 18060] [client 122.8.92.73:10031] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||instituteofscience.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "instituteofscience.com"] [uri "/sce.html"] [unique_id "atDdVDY-rbsCw62M-61glgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:14:46
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:14:37.225499 2026] [security2:error] [pid 15619:tid 15619] [client 122.8.92.73:15983] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:14:37.225499 2026] [security2:error] [pid 15619:tid 15619] [client 122.8.92.73:15983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tobyscott.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tobyscott.com"] [uri "/health.cfm"] [unique_id "atDRvT4uQszsrYX4CI7UhAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-12 18:54:40
UTC ·
(3 weeks ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-08-09 15:26:10
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 11:26:01.676475 2026] [security2:error] [pid 2538:tid 2538] [client 122.8.92.73:60967] ModSecu ...
show more
(mod_security) mod_security (id:210730) triggered by 122.8.92.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 11:26:01.676475 2026] [security2:error] [pid 2538:tid 2538] [client 122.8.92.73:60967] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.flavornet.org|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.flavornet.org"] [uri "/info/jmol/pdb/2825-91-4.pdb"] [unique_id "anicCYVzAwrPFbGRMh81agAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
