🇺🇸
TPI-Abuse
2026-10-12 20:41:44
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 16:41:37.730212 2026] [security2:error] [pid 30781:tid 30926] [client 161.115.234.123:60855] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||2541marinersway.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "2541marinersway.com"] [uri "/"] [unique_id "as1GAUvA3nSA_c4cuVf6KAAAAFQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 02:02:50
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 22:02:45.241115 2026] [security2:error] [pid 15404:tid 15404] [client 161.115.234.123:48373] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cmcnyc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cmcnyc.com"] [uri "/"] [unique_id "asMFRXIte9O3zpMEAHcfzQAAACY"], referer: http://laborinvestigator.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Jochen Pretli
2026-10-02 01:25:33
(2 weeks ago)
connection to honeypot
Email Spam
Port Scan
🇸🇬
mypatricks
2026-09-23 03:22:50
(3 weeks ago)
161.115.234.123 | Port: 12610 | DNS: 161.115.234.123 2026-09-23T11:22:49+08:00 America/Los_Angeles | ...
show more
161.115.234.123 | Port: 12610 | DNS: 161.115.234.123 2026-09-23T11:22:49+08:00 America/Los_Angeles | Suspicious Spoofing Activity | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 HTTP/1.1 443 GET | URL: / | Ref: https://www.google.com/ | Country: US/United States/-08:00 IP City: Los Angeles a3f66d3f4822d6f8-IAD/Ashburn, VA, United States 1 hits/0 secs Browser 0
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇺🇸
TPI-Abuse
2026-09-06 22:18:46
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 18:18:39.429795 2026] [security2:error] [pid 12641:tid 12641] [client 161.115.234.123:38007] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.spectorworld.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.spectorworld.com"] [uri "/team"] [unique_id "ap3mv4G9FJjlMhCDanBgYwAAAAQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-05 00:12:18
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 20:12:12.152259 2026] [security2:error] [pid 644336:tid 644342] [client 161.115.234.123:57789] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ceresfund.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ceresfund.com"] [uri "/management"] [unique_id "anJ_3IYFArr0S-tBinetfAAAAAQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 19:49:42
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 15:49:37.017121 2026] [security2:error] [pid 30426:tid 30428] [client 161.115.234.123:34905] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chilltech.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chilltech.info"] [uri "/"] [unique_id "alKeUXL12py3rZheAveI4gAAAQA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 21:35:21
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 17:35:13.198633 2026] [security2:error] [pid 17106:tid 17106] [client 161.115.234.123:57937] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tjsworld.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tjsworld.net"] [uri "/"] [unique_id "alFlkdaMgH7yBEBI1h7atQAAAA8"], referer: http://tjsworld.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 06:56:18
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 02:56:14.870397 2026] [security2:error] [pid 18355:tid 18355] [client 161.115.234.123:38463] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.azcrittergetter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.azcrittergetter.com"] [uri "/"] [unique_id "akoADm4-NPBAhO4W0Fz7MAAAAAs"], referer: http://thewildlifeguy.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Alvino
2026-06-30 09:11:26
(3 months ago)
Blocked due to abuseScore: 16
Web Spam
Hacking
Web App Attack
🇨🇭
blinx
2026-06-26 19:33:35
(3 months ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 10:08:20
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 06:08:16.522317 2026] [security2:error] [pid 22534:tid 22643] [client 161.115.234.123:38907] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.driftwoodblue.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.driftwoodblue.com"] [uri "/"] [unique_id "ahwIkNoCX3QxVfUEVzAnRgAAAUE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 22:04:36
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 18:04:31.479759 2026] [security2:error] [pid 23836:tid 23836] [client 161.115.234.123:57901] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wolter-hausser.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wolter-hausser.com"] [uri "/"] [unique_id "ahdqbwPq9uxSb227JcBU1AAAABQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-16 02:18:53
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 22:18:48.930454 2026] [security2:error] [pid 16658:tid 16658] [client 161.115.234.123:36187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.beckersystems.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.beckersystems.com"] [uri "/partners/businesstobusinessassociation.com/leagueofmayors/"] [unique_id "agfUCG0HpLFccDnj1Ly0igAAAA0"], referer: http://nationalleagueofmayors.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 19:52:11
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 15:52:06.862300 2026] [security2:error] [pid 6318:tid 6318] [client 161.115.234.123:33471] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||infinite-e.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "infinite-e.com"] [uri "/Lisa/index.htm"] [unique_id "afztZj7RIFuiOd6Ew_5fVgAAAAw"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
