🇺🇸
TPI-Abuse
2026-11-14 12:24:26
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 122.8.95.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:24:22.615247 2026] [security2:error] [pid 3295:tid 3295] [client 122.8.95.62:10967] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.95.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:24:22.615247 2026] [security2:error] [pid 3295:tid 3295] [client 122.8.95.62:10967] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/posting.php"] [unique_id "avhS9q7snpuPrW7a7Swh6AAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 11:49:51
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 122.8.95.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:49:44.574868 2026] [security2:error] [pid 1150:tid 1150] [client 122.8.95.62:29101] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.95.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:49:44.574868 2026] [security2:error] [pid 1150:tid 1150] [client 122.8.95.62:29101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/festivals/biff-2019-announces-short-film-competition-winners/"] [unique_id "avhK2JB5StkWTkfnEySpWgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-11-10 17:22:33
UTC ·
(4 days ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
Zandro
2026-11-09 20:00:14
UTC ·
(5 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇫🇷
bigorre.org
2026-11-06 16:09:48
UTC ·
(1 week ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-01 11:37:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 122.8.95.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 06:37:28.699428 2026] [security2:error] [pid 4579:tid 4579] [client 122.8.95.62:36169] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.95.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 06:37:28.699428 2026] [security2:error] [pid 4579:tid 4579] [client 122.8.95.62:36169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/07/16/july-16-2014-arsenal-for-democracy-92/"] [unique_id "auckeI4NDesPnbN811Kz-gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 11:21:38
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.95.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:21:35.346708 2026] [security2:error] [pid 25334:tid 25391] [client 122.8.95.62:59609] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.95.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:21:35.346708 2026] [security2:error] [pid 25334:tid 25391] [client 122.8.95.62:59609] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.soundstore.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.soundstore.com"] [uri "/nolan/ass/"] [unique_id "auR9v82nlKvMIXMqLs-vngAAAdc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-24 04:37:17
UTC ·
(3 weeks ago)
Web App Attack
Web App Attack
🇫🇷
mrcrassi
2026-10-21 14:06:33
UTC ·
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15
T ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
dynamix
2026-08-30 13:22:59
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-08-23 02:05:17
UTC ·
(2 months ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
