🇺🇸
TPI-Abuse
2026-10-17 23:11:20
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 124.230.120.66 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 124.230.120.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:11:14.479811 2026] [security2:error] [pid 27071:tid 27071] [client 124.230.120.66:53349] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.stoneageartifacts.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.stoneageartifacts.com"] [uri "/"] [unique_id "atQAkqFu8mdlGjU82e5DGAAAAAw"], referer: http://www.stoneageartifacts.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
stechusa
2026-04-30 13:24:13
(5 months ago)
[Askari] | Behavior: HTTP/1.1 over TLS, Holding server worker, Concurrent page load during attack, T ...
show more
[Askari] | Behavior: HTTP/1.1 over TLS, Holding server worker, Concurrent page load during attack, Targeting specific pages
show less
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-04-30 13:24:13
(5 months ago)
ELEVATED_THREAT | 15 IPs targeting /brand/satco-products-inc.html | Facet request during elevated th ...
show more
ELEVATED_THREAT | 15 IPs targeting /brand/satco-products-inc.html | Facet request during elevated threat (facet_ratio=0.71, unique_ips=101) | HTTP/1.1 over TLS (elevated=True)
show less
Bad Web Bot
DDoS Attack
2026-03-27 17:42:22
(6 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-09-25 18:44:25
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 124.230.120.66 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 124.230.120.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 14:44:20.203731 2025] [security2:error] [pid 11519:tid 11519] [client 124.230.120.66:25860] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/1103"] [unique_id "aNWNhKnaMiJm_dZ9l_yMmwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-24 16:39:43
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 124.230.120.66 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 124.230.120.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 12:39:39.426562 2025] [security2:error] [pid 1830:tid 1830] [client 124.230.120.66:41438] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/3008/game/149992/"] [unique_id "aNQey7uov9V-W8wlBFJeQgAAACY"], referer: https://www.renju.net/game/149992/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-21 20:04:35
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 124.230.120.66 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 124.230.120.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 16:04:32.963821 2025] [security2:error] [pid 7709:tid 7709] [client 124.230.120.66:46703] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/504/game/11439/"] [unique_id "aNBaULKSaNhHpILxnSeKIQAAAAo"], referer: https://www.renju.net/game/11439/
show less
Brute-Force
Bad Web Bot
Web App Attack
