🇺🇸
TPI-Abuse
2026-11-15 09:22:48
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:22:42.648449 2026] [security2:error] [pid 15162:tid 15162] [client 122.8.93.34:13797] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:22:42.648449 2026] [security2:error] [pid 15162:tid 15162] [client 122.8.93.34:13797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mtshastaconcerts.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mtshastaconcerts.com"] [uri "/event/the-contenders/"] [unique_id "avl54nWUrfqQJEDodKAlSgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:38:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:38:09.898372 2026] [security2:error] [pid 1408:tid 1408] [client 122.8.93.34:16259] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:38:09.898372 2026] [security2:error] [pid 1408:tid 1408] [client 122.8.93.34:16259] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/wp-content/themes/florida-wp/css/flexslider.css"] [unique_id "avgsAYhfrqJx6v6sN1XDAgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 03:14:18
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:14:12.911579 2026] [security2:error] [pid 20442:tid 20442] [client 122.8.93.34:9061] ModSec ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:14:12.911579 2026] [security2:error] [pid 20442:tid 20442] [client 122.8.93.34:9061] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jamesmsmall.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jamesmsmall.com"] [uri "/blog/2016/05/"] [unique_id "avPdhKHW7nsY8KwipUmw0AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 12:44:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:44:36.288260 2026] [security2:error] [pid 32301:tid 32301] [client 122.8.93.34:9313] ModSec ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:44:36.288260 2026] [security2:error] [pid 32301:tid 32301] [client 122.8.93.34:9313] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/stats/statistic405.html"] [unique_id "au8dNEnVJbqve2zFy4MwRQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 01:17:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:17:16.455270 2026] [security2:error] [pid 31506:tid 31506] [client 122.8.93.34:60785] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:17:16.455270 2026] [security2:error] [pid 31506:tid 31506] [client 122.8.93.34:60785] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||antimu.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "antimu.com"] [uri "/leifert-induction-heaters.html"] [unique_id "auPwHPRydlElN0Q_i0BfRwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 23:33:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:33:04.876581 2026] [security2:error] [pid 32594:tid 32594] [client 122.8.93.34:62757] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:33:04.876581 2026] [security2:error] [pid 32594:tid 32594] [client 122.8.93.34:62757] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.petesplaza.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.petesplaza.com"] [uri "/website/hungary/geneology.html"] [unique_id "auKGMLCmi6KGxPUYK6chkQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:16:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:16:01.948922 2026] [security2:error] [pid 19162:tid 19162] [client 122.8.93.34:14539] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:16:01.948922 2026] [security2:error] [pid 19162:tid 19162] [client 122.8.93.34:14539] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/592-82-5.html"] [unique_id "auJmEUZC6DOW1pCBgZJUBAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 18:06:46
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:06:38.647943 2026] [security2:error] [pid 2979:tid 2979] [client 122.8.93.34:22487] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:06:38.647943 2026] [security2:error] [pid 2979:tid 2979] [client 122.8.93.34:22487] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/speaker/endpoverty/"] [unique_id "auI5rjs7Jbtl28SLcfqBNgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 18:01:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:01:04.203364 2026] [security2:error] [pid 26881:tid 26886] [client 122.8.93.34:21753] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:01:04.203364 2026] [security2:error] [pid 26881:tid 26886] [client 122.8.93.34:21753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||greencitymethods.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "greencitymethods.com"] [uri "/2016/10/page/2/"] [unique_id "at5D4FG4Zqi0PMVIePXQ9gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-14 04:49:44
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 122.8.93.34
2026-09-14T05:24:19+02:00 vpn Access-Reject '173.248.14.104' station: 122.8.93.34 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 122.8.93.34
2026-09-14T05:24:19+02:00 vpn Access-Reject '173.248.14.104' station: 122.8.93.34 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
agabeckov
2026-09-10 16:09:32
UTC ·
(2 months ago)
Fail2Ban detected brute-force attempt on Cisco Anyconnect
VPN IP
Brute-Force
🇸🇪
OnTheEdge
2026-09-08 15:10:28
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇩🇪
ghostwarriors
2026-06-17 12:50:16
UTC ·
(4 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 16:54:11
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
