🇺🇸
TPI-Abuse
2026-11-10 01:55:46
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:55:39.572684 2026] [security2:error] [pid 23317:tid 23317] [client 122.8.92.79:44815] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:55:39.572684 2026] [security2:error] [pid 23317:tid 23317] [client 122.8.92.79:44815] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.losbarbarosdelnorte.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.losbarbarosdelnorte.com"] [uri "/ideologia-politica/contra-los-ricos-hasta-emparejarnos/"] [unique_id "avJ5m5_U60wEiRF0J7GUJwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:31:45
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:31:37.527504 2026] [security2:error] [pid 20396:tid 20396] [client 122.8.92.79:30993] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:31:37.527504 2026] [security2:error] [pid 20396:tid 20396] [client 122.8.92.79:30993] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tomthomasplumbing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tomthomasplumbing.com"] [uri "/plumbing-heating-hvac-nepa.html"] [unique_id "avJl6aqQA_XRofUlxJ4fbQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:06:57
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:06:53.430577 2026] [security2:error] [pid 5791:tid 5791] [client 122.8.92.79:48761] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:06:53.430577 2026] [security2:error] [pid 5791:tid 5791] [client 122.8.92.79:48761] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||backtosleep.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "backtosleep.com"] [uri "/Stressless/Stressless-Lounge-Sofa-Sectional.htm"] [unique_id "avE4zR7iDGmGgFB9Izo4vgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
klaus_ph
2026-10-30 00:24:05
UTC ·
(1 week ago)
[Thu Oct 29 22:20:34.134118 2026] [ssl:info] [pid 929971] [client 122.8.92.79:58505] AH01964: Connection to child 13 established (server fit.vufindnet.de:443)
...
Hacking
🇺🇸
TPI-Abuse
2026-10-21 19:43:51
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:43:43.422693 2026] [security2:error] [pid 3582:tid 3582] [client 122.8.92.79:29483] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:43:43.422693 2026] [security2:error] [pid 3582:tid 3582] [client 122.8.92.79:29483] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.testrong.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.testrong.com"] [uri "/havenbuilders/bbsales.html"] [unique_id "atkV7xj3OjX34imskXHjQgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:28:25
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:28:19.821910 2026] [security2:error] [pid 16755:tid 16770] [client 122.8.92.79:42057] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:28:19.821910 2026] [security2:error] [pid 16755:tid 16770] [client 122.8.92.79:42057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.worldecom.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.worldecom.org"] [uri "/standards"] [unique_id "atDU8-tmnXMiiU9XLkIE9AAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:56:51
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:55:18.843647 2026] [security2:error] [pid 22540:tid 22540] [client 122.8.92.79:62713] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:55:18.843647 2026] [security2:error] [pid 22540:tid 22540] [client 122.8.92.79:62713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/a95f12bbba4b01e5862566eb005f39d3"] [unique_id "atDNNio20di7g6VKYZLmcgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 22:02:45
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 18:02:41.052054 2026] [security2:error] [pid 31827:tid 31827] [client 122.8.92.79:39375] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 122.8.92.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 18:02:41.052054 2026] [security2:error] [pid 31827:tid 31827] [client 122.8.92.79:39375] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.flavornet.org|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.flavornet.org"] [uri "/info/jmol/pdb/38284-27-4.pdb"] [unique_id "arWeAcmHWuyyCzDSlkJMqwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
agabeckov
2026-09-09 01:20:20
UTC ·
(2 months ago)
Fail2Ban detected brute-force attempt on Cisco Anyconnect
VPN IP
Brute-Force
🇺🇸
SiliSoftware
2026-07-07 15:40:40
UTC ·
(4 months ago)
/phpBB3/viewtopic.php?t=24
Web App Attack
2026-02-12 15:17:21
UTC ·
(8 months ago)
wordpress-trap
Web App Attack
2026-02-03 22:20:26
UTC ·
(9 months ago)
Session Crossing
Hacking
