Total reports
5 from
2 distinct
reporters
First reported
June 24th 2026
Most recent report
17 hours ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
Most common categories
Web App Attack
4
Brute-Force
4
Bad Web Bot
4
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-10 10:58:25
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210350) triggered by 122.8.95.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:58:18.331836 2026] [security2:error] [pid 25393:tid 25393] [client 122.8.95.65:62647] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.95.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:58:18.331836 2026] [security2:error] [pid 25393:tid 25393] [client 122.8.95.65:62647] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.eroticperfection.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.eroticperfection.com"] [uri "/gals/mpl019de.html"] [unique_id "avL4ygF1dyzHk4oo7St9fQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:43:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 122.8.95.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:43:02.212739 2026] [security2:error] [pid 10830:tid 10853] [client 122.8.95.65:20567] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.95.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:43:02.212739 2026] [security2:error] [pid 10830:tid 10853] [client 122.8.95.65:20567] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dasperformance.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dasperformance.com"] [uri "/custom-harley-parts/"] [unique_id "avElJuK1x9-0ZsYuZ-JOxAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 00:59:12
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 122.8.95.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:59:09.332890 2026] [security2:error] [pid 3930552:tid 3930658] [client 122.8.95.65:25859] M ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.95.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:59:09.332890 2026] [security2:error] [pid 3930552:tid 3930658] [client 122.8.95.65:25859] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.newtrendmag.org"] [uri "/"] [unique_id "auvU3achh8z920LUPQ2IpAAAAgQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 15:17:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 122.8.95.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:17:20.159194 2026] [security2:error] [pid 17572:tid 17572] [client 122.8.95.65:19349] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.95.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:17:20.159194 2026] [security2:error] [pid 17572:tid 17572] [client 122.8.95.65:19349] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/05/25/he-who-controls-the-narrative-controls-the-universe/"] [unique_id "auipgF-QCniOA2ldBp1JDQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-06-24 18:34:30
UTC ·
(4 months ago)
Triggered Cloudflare WAF (firewallCustom) from SE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
This report was generated by:
https:// ...
show more
Triggered Cloudflare WAF (firewallCustom) from SE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
