🇺🇸
TPI-Abuse
2026-11-11 12:18:13
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 122.8.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:18:08.938569 2026] [security2:error] [pid 9713:tid 9713] [client 122.8.94.71:29489] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:18:08.938569 2026] [security2:error] [pid 9713:tid 9713] [client 122.8.94.71:29489] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/bedia/bedia/bedia.html"] [unique_id "avRdAJrZoOpOhGhoWneV7QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 15:55:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 122.8.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 10:55:12.305862 2026] [security2:error] [pid 7945:tid 7945] [client 122.8.94.71:9569] ModSecur ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 10:55:12.305862 2026] [security2:error] [pid 7945:tid 7945] [client 122.8.94.71:9569] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||compassionfatigue.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "compassionfatigue.org"] [uri "/founders-blog/focusing-on-wellness-in-difficult-times"] [unique_id "auym4E9tz4o2VklSc8Os2wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 09:44:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 122.8.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:44:35.302907 2026] [security2:error] [pid 2378:tid 2378] [client 122.8.94.71:15567] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:44:35.302907 2026] [security2:error] [pid 2378:tid 2378] [client 122.8.94.71:15567] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/10/31/sudan-info-minister-omar-al-bashir-deserves-nobel-peace-prize/"] [unique_id "aumtAw8o--b4fPi5MMKscQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 04:48:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 00:48:14.955485 2026] [security2:error] [pid 26244:tid 26244] [client 122.8.94.71:14571] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 00:48:14.955485 2026] [security2:error] [pid 26244:tid 26244] [client 122.8.94.71:14571] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||campnecon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "campnecon.com"] [uri "/campnecon42guests/attachment/goddess/"] [unique_id "auQhjrNkUbnpyleBftJpvwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-04 10:05:27
UTC ·
(1 month ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇺🇸
SiliSoftware
2026-07-28 05:18:14
UTC ·
(3 months ago)
/phpBB3/viewtopic.php?t=425
Web App Attack
🇫🇷
Yepngo
2026-07-25 23:19:34
UTC ·
(3 months ago)
122.8.94.71 - - [26/Jul/2026:01:07:49 +0200] "POST /wp-login.php HTTP/2.0" 200 11350 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
122.8.94.71 - - [26/Jul/202 ...
show more
122.8.94.71 - - [26/Jul/2026:01:07:49 +0200] "POST /wp-login.php HTTP/2.0" 200 11350 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
122.8.94.71 - - [26/Jul/2026:01:19:33 +0200] "POST /wp-login.php HTTP/2.0" 200 11356 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
2025-10-06 01:35:39
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
