🇺🇸
TPI-Abuse
2026-07-06 04:25:18
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:25:12.593567 2026] [security2:error] [pid 4164:tid 4164] [client 161.115.234.219:52029] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.johncyphers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.johncyphers.com"] [uri "/"] [unique_id "aksuKGdvFel8COAUrJuWAAAAAAk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-04 20:23:17
(1 day ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 13:12:14
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 09:12:09.180041 2026] [security2:error] [pid 25265:tid 25265] [client 161.115.234.219:55041] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||infodrop.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "infodrop.info"] [uri "/ruby"] [unique_id "ahRKqcZVXNvORj4kcPFDJAAAAA0"], referer: http://rubydewbee.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 02:32:35
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 22:32:28.571554 2026] [security2:error] [pid 6250:tid 6250] [client 161.115.234.219:37377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.b9k9.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.b9k9.com"] [uri "/Seed.html"] [unique_id "ahO0vKZRmlyx2JocZX2hSwAAAAI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 23:44:25
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 19:44:22.390149 2026] [security2:error] [pid 21128:tid 21128] [client 161.115.234.219:46601] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||travelsupersonic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "travelsupersonic.com"] [uri "/"] [unique_id "agz11qSMWz8I7K5G8E1SMwAAAAs"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 02:47:12
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 22:47:07.066749 2026] [security2:error] [pid 3731:tid 3731] [client 161.115.234.219:48949] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.beckersystems.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.beckersystems.com"] [uri "/partners/lakeworthcity.com"] [unique_id "agvPKy-TJcOW2Avt01tATgAAAAM"], referer: http://lakeworthcity.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 00:54:31
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 20:54:25.733282 2026] [security2:error] [pid 6592:tid 6592] [client 161.115.234.219:54551] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||4azadi.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "4azadi.org"] [uri "/"] [unique_id "agpjQY0cqDXf022d2q1EOgAAABA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
6o6ep
2026-02-13 23:11:41
(4 months ago)
Automatic report from firewall log
Port Scan
Hacking
Web App Attack
2026-02-04 01:41:02
(5 months ago)
Malicious activity detected
Hacking
Web App Attack
🇷🇺
6o6ep
2026-01-30 13:57:44
(5 months ago)
Automatic report from firewall log
Port Scan
Hacking
Web App Attack