🇺🇸
TPI-Abuse
2026-06-17 21:38:22
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 17:38:14.343129 2026] [security2:error] [pid 25292:tid 25292] [client 161.115.234.11:41131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||iwsa.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "iwsa.info"] [uri "/construction2"] [unique_id "ajMTxkpidvpVMhd75eVXHAAAAAc"], referer: http://tuthienvegan.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 19:46:21
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 15:46:13.817529 2026] [security2:error] [pid 5169:tid 5169] [client 161.115.234.11:58897] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||balivisaservice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "balivisaservice.com"] [uri "/"] [unique_id "ahSnBfGolu5Hp3LRjkEMngAAAAA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 13:33:55
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 09:33:50.721843 2026] [security2:error] [pid 14403:tid 14418] [client 161.115.234.11:46291] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dermatologycoloradosprings.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dermatologycoloradosprings.com"] [uri "/"] [unique_id "ahRPvuJRD6eDBvK4ImWLQQAAAAs"], referer: http://gingermentz.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 05:00:43
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 01:00:35.640656 2026] [security2:error] [pid 7520:tid 7520] [client 161.115.234.11:47041] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.itaxcenter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.itaxcenter.com"] [uri "/"] [unique_id "agqc85sTmMCrHMxTr_b9PgAAAAI"], referer: http://investortaxcenter.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 06:45:28
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 02:45:22.821932 2026] [security2:error] [pid 11532:tid 11541] [client 161.115.234.11:44575] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||eadweb.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "eadweb.com"] [uri "/"] [unique_id "afrjgk4xDBSfBksd3SoNqQAAAMM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Vano Ganzzz
2026-05-03 20:54:36
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 6079 (RCN)
Protocol: HTT ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 6079 (RCN)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-05-03T20:54:36Z
Ray ID: 9f62296b7e575668
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Edg/99.0.1150.30
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-02 11:01:15
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 07:01:07.652099 2026] [security2:error] [pid 31198:tid 31198] [client 161.115.234.11:36921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.markrudin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.markrudin.com"] [uri "/christopher/"] [unique_id "afXZc-qIcZKaMxI5Yv-N7gAAAAM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-03-09 20:45:42
(3 months ago)
Form spam
Web Spam
🇫🇷
France Artisanat
2026-02-25 19:43:22
(3 months ago)
Dear Sir/Madam
Place bon-artisanat.fr in Google Search Index to be displayed in web search result ...
show more
Dear Sir/Madam
Place bon-artisanat.fr in Google Search Index to be displayed in web search results!
Register bon-artisanat.fr at https://searchregister.info
show less
Web Spam
🇺🇸
ambor
2026-02-17 23:50:29
(4 months ago)
Repeat spam attempt from blocked email [email protected] via wordotron.com contact form. ...
show more
Repeat spam attempt from blocked email [email protected] via wordotron.com contact form. Attempt #2. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51. Timestamp: 2026-02-17T23:50:29.839Z
show less
Web Spam
2025-10-26 21:03:00
(7 months ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
2025-10-22 13:09:00
(7 months ago)
"Undesired, excess traffic against library/education infrastructure"
Brute-Force
2025-10-20 13:28:00
(7 months ago)
"Undesired, excess traffic against library/education infrastructure"
Brute-Force